Post
well, i may have overstated his position here (based on his writing from august). from today:
I’m worried that there may be improvements in classical cryptanalysis of MLWE and ECDSA that leave us in a bad place with standards.
1 repost3 likes
also this thread clarifies a bunch too: x.com/matthew_d_gr...
x.comMatthew Green (@matthew_d_green) on XI’ve had a few people write to ask me to follow up on a (reply!) tweet I wrote that’s gotten a lot of retweets. I considered deleting it just to avoid the headache, but I think that would make people more paranoid. So let me share my thoughts.