@sophieschmieg@infosec.exchange
2026-09-17 17:03 UTC
I see, when NIST considers 6 bit a rounding error offset by memory cost, they basically claim that 2⁴⁰ + 2⁴⁰ = 2⁸⁰, but when someone reduces the attack cost of Classic McEliece to substantially below 2¹²⁸, memory suddenly is very important and means that the work should be dismissed.
Replies (1)
-
@ohir@social.vivaldi.net 2026-09-24 15:15
@sophieschmieg@infosec.exchange > they basically claim that 2⁴⁰ + 2⁴⁰ = 2⁸⁰ It reminds me the genesis of ipv6 balooning from six octets to sixteen – "we said we want to have at least _four_ times the addresses space and you come with just two octets more? This shall not pass. I said four times so it must be 4x4" Ah, and unicode's 0x100000 plane being "the 16th". :)