Content-Type: multipart/signed; micalg=pgp-sha256;
	protocol="application/pgp-signature"; boundary="+Wku+oz+UiWzfLSQ"


--+Wku+oz+UiWzfLSQ
Content-Type: text/plain; charset="UTF-8"
Content-Disposition: inline

The following observation may be of interest for people quantifying the
stability of state-of-the-art attacks against Classic McEliece.

Our PQCrypto 2008 ISD algorithm is faster than the Eurocrypt 2022 ISD
algorithm, on the CPUs selected in the new paper, for the challenges
selected in the new paper, according to a direct comparison of (1) our
measurements of the 2008 software (the 2+2 case of the 2008 algorithm)
and (2) the speeds reported in the new paper for that paper's software.

Instructions for reproducing our measurements appear in README in the
following package, along with a review of the known opportunities for
further speedups: https://cr.yp.to/software/lowweight-20220616.tar.gz

The new paper's comparison to previous work does not appear to account
for various speedups described in the 2008 paper, such as the usage of
2^l-bit tables and the "c" parameter. These speedups are particularly
important for the 2+2 case, also influencing comparisons of the 2+2 case
to other cases.

---D. J. Bernstein, T. Lange, and C. Peters

-- 
You received this message because you are subscribed to the Google Groups "pqc-forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email to pqc-forum+unsubscribe@list.nist.gov.
To view this discussion on the web visit https://groups.google.com/a/list.nist.gov/d/msgid/pqc-forum/20220616182326.231314.qmail%40cr.yp.to.

--+Wku+oz+UiWzfLSQ
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEE3QolqQXydru4e4ITsMANTjsOVFkFAmKrdR4ACgkQsMANTjsO
VFkB+A//TaS9aza5nZev6o4cbOP8mdIS5X8/x4e1Npg/p7zGvELgr1nmv4NPKWp/
lfohkS/CRbOs87C/IawOKdhDZsKDKd7DfJ5Wd+XCNWYnpYS5iIZwfkPusdRsF0WP
ARHU5VsHuCWn1NMrJYpoAcONXT0KKvIIRVjwWv6NaevzWwttEWLb5Q2ijKOXlSKW
m9T8eZnsZ37f4YswndHyGh8BLg+f7AW9hR8EojjkaE8jpik3Z9Bsx33OkKqa8oxM
vSvF7ezlYlmjjM+vLecIVNR4w4+Q/Yt5wEHmNmVOwHuCz1Bg7m/jCKPFTjF8loft
MVQp6cRz4XE6+m4aYd0TrJw6t7d/t4MIdB+GLA1UdRP6kSYqs7WCQmRdbyh9HZV3
IcFUxYCDkqqJp6iuuQezu4k438l07l02NjjQQXS7N5K75YOjZnpcfoLt7eqQKJqi
XWM4i5tztzJjlkp55v97q3BM96FbuIJYXV/bh4Pm7Ri6oHe/d2X5Vj2W59WrSFNJ
ncPqPl3lnjTV4Zswk4rL7x4y4Y/UBMaJK80HdYrTc+dck6GpPgUrRP+RsUY9RYGX
t0lXaCVqlhcTK2Rv+UIyYtGHTfSygwf7GbnEuWwHBrqNzEzitvR5AAvLZ1E4r+Z+
BbdQ1dP2TB9e++I/s1jSNrdUYcGhTYraTk75D3kPzxvAvU3LVUA=
=NMAi
-----END PGP SIGNATURE-----

--+Wku+oz+UiWzfLSQ--