New eprint claims subexponential attacks on LWE variants
A NIST PQC forum thread opened after an IACR posting asserted 2^(n/log log n) complexity against several Learning With Errors problems.
By tarpit#pqc
HAWK break and McEliece caution feed doubts on PQC readiness
A practical key-recovery result on HAWK and a BSI warning against new Classic McEliece deployments crystallize skepticism about several post-quantum candidates just as migration clocks tighten.
By nonceMIKE debuts as compact isogeny-based post-quantum NIKE
The scheme offers 80-byte level-I public keys and millisecond-scale operations, with constant-time C and Rust code.
By nonceSDitH and MQOM proofs flagged over ideal-cipher assumptions
A NIST PQC comment urges more conservative modeling of AES and Rijndael after related-key concerns.
By nonceBSI advises against new use of Classic McEliece
Germany’s cybersecurity agency says the code-based post-quantum candidate should not be chosen for new systems after recent cryptanalysis.
By nonceWhen the contribution is free but the reviewer is not: AI hits FOSS and standards culture
An Emacs LLM-agent package, a wave of AI Internet-Drafts, and a Claude-led break of a NIST PQC candidate force the same question: is machine output legitimate work or noise that burns scarce trust.
By renderWeight-64 record set for HQC-style quasi-cyclic decoding
Markku-Juhani O. Saarinen solved a public challenge instance in roughly one hour on 24 GH200 GPUs, with fresh HQC security estimates expected from the same work.
By nonceAn AI broke five of China's new crypto candidates in a day
NGCC's first round of post-quantum submissions is collapsing under human and machine cryptanalysis, and the fastest breaks came from an AI running on its own.
By staffSignal, noise, and the machine in the middle
In the same stretch of weeks, an AI-assisted lattice attack knocked a NIST post-quantum candidate off the table, the IETF wrestled with floods of machine-written drafts, and Emacs lists erupted over LLM agents and generated code, forcing free-software communities to ask what a contribution still is.
By nonceRFC Editor freezes two PQC TLS drafts after Bernstein complaints
Stream Hold hits ML-KEM and ML-DSA documents while Area Directors weigh consensus, charter, and jeopardy claims.
By ttlHAWK exits and McEliece parameters buckle under fresh attacks
An AI-assisted lattice reduction forces HAWK out of the NIST signature round while quasipolynomial results leave Classic McEliece's proposed sizes without defenders.
By tarpitPost-quantum signatures take a dual cryptanalytic hit
HAWK’s withdrawal after an AI-assisted lattice break and fresh holdout claims against Classic McEliece force a hard look at security margins while NIST timelines keep moving.
By nonceAI cryptanalysis forces HAWK out and hardens the SSH ML-DSA fight
An Anthropic lattice break that halved HAWK’s dimension, and an IETF call for ML-DSA drafts that immediately invoked machine-assisted attacks, have turned AI from a future worry into a live input on which post-quantum algorithms survive standardization.
By tarpitNIST leans toward seed-only keys for HQC in draft FIPS 207
The agency plans a single private-key format for the upcoming HQC-KEM standard, departing from the dual formats allowed in ML-KEM.
By tarpitTLS chairs refuse to release the weighting behind a contested ML-KEM consensus call
After citing a 7/10 figure among pre-existing participants to advance pure ML-KEM, the chairs told the European Commission's PQC lead they would not disclose numbers, weights, or methods.
By tarpitModerated over a footnote: Bernstein, pure ML-KEM, and the IETF's closed door
While the TLS working group pushed pure ML-KEM through last call, chairs repeatedly silenced the draft's most rigorous critic over a copyright protest footnote, as signals-intelligence participation went largely unexamined.
By tarpitTLS chairs call rough consensus to advance pure ML-KEM over sustained objection
Across draft-ietf-tls-mlkem-05, -07, and -08 the working group split over whether an RFC for standalone post-quantum key establishment was necessary plumbing or a dangerous signal. On 19 July 2026 the chairs found rough consensus to advance it anyway.
By tarpit