2020.02.03 11:31:33 (1224279247424049152) from Daniel J. Bernstein, replying to "Noah @NoahSD@mathstodon.xyz (@NoahSD)" (1223781261644222464):
https://eprint.iacr.org/2019/1436 from Kirchner, Espitau, Fouque. Sounds like >1000x from the Galois structure, plus some general speedups. The approximation factor and consequences for BKZ aren't clear. The point I was making is that lattice security wasn't, and isn't, well understood.
2020.02.02 02:32:44 (1223781261644222464) from "Noah @NoahSD@mathstodon.xyz (@NoahSD)":
Hi Dan. Watched your talk at the Simons Quantum program, and I was just curious which paper you were referring to at the very end that breaks things about a million times faster?