2013.08.15 07:53:23 (367886718071894016) from Daniel J. Bernstein, replying to "David Cash (@cdavidcash)" (367857134303600640):
E.g., DL in GF(2^n)^*: worst-case-to-average-case reduction is trivial, ancient, well known. Claiming to "miss" it is ludicrous. @cdavidcash
2013.08.15 01:32:58 (367790984869851137) from Daniel J. Bernstein:
Often fascinating to see how bad science spreads: e.g. "lattice-based crypto is the only crypto with worst-case-to-average-case reductions."
2013.08.15 05:55:49 (367857134303600640) from "David Cash (@cdavidcash)":
@hashbreaker What are the other examples? OTP? How is it "bad science" to miss counterexamples, as opposed to, say, a misunderstanding?