as a heads up, there is another attack paper against McEliece today https://eprint.iacr.org/2026/1339 https://eprint.iacr.org/2026/1339 Note that this is by s

as a heads up, there is another attack paper against McEliece today https://eprint.iacr.org/2026/1339 https://eprint.iacr.org/2026/1339 Note that this is by someone from the BSI. It's worth mentioning the BSI is very familiar with lattice-based schemes (they recommend using FrodoKEM rather than Kyber, but whatever). Despite this familiarity, the attacks they are able to publish aren't regarding lattice-based schemes, and instead a different scheme Bernstein was affiliated with. NTRU-derivatives and McEliece derivatives are (objectively speaking) not a good track record to have, PQC-wise.