Debunking NIST's calculation of the Kyber-512 security level
HN Discussion
The inability to count correctly: Debunking NIST's calculation of the Kyber-512 security level.