Debunking NIST's calculation of the Kyber-512 security level(blog.cr.yp.to)
415 points by bumbledraven | 175 comments
Daniel J. Bernstein's blog post arguing that NIST miscalculated Kyber-512's security level by multiplying costs that should have been added.