Debunking NIST's calculation of the Kyber-512 security level
https://blog.cr.yp.to/20231003-countcorrectly.html

https://news.ycombinator.com/item?id=37756656