Post-quantum: Germany's BSI advises against Classic McEliece after a series of attacks
Since August, cryptanalysis work has put Classic McEliece below its claimed security level. The BSI advises against it for new projects, though no practical attack exists to date.