Reposted by Daniel Slamanig
Improved key recovery attacks against Classic McEliece with help from Claude
All standardized parameter sets for Classic McEliece are no better than NIST Level 1 now
eprint.iacr.org/2026/1984
eprint.iacr.org
Improving GIJS Key Recovery for Classic McEliece
Ghoshal, Ishai, Jain and Sun (GIJS) recently gave the first distinguisher for Classic McEliece public keys that is cheaper than generic decoding. They estimate its cost at $2^{114}$ to $2^{124}$ bit o...