Post

well, i may have overstated his position here (based on his writing from august). from today:

Matthew Green@matthewdgreen.bsky.social

I’m worried that there may be improvements in classical cryptanalysis of MLWE and ECDSA that leave us in a bad place with standards.

1 repost3 likes

> These problems (right now basically MLWE and ECDLP with LWE and syndrome decoding as backups) have been extensively analyzed by humans. We felt good that the best known attacks were the best attacks. But we’re learning that human mathematical analysis isn’t the gold standard. 4/