Polynomial Quantum Attack on Module-LWE over Power-of-2 Cyclotomics

A new polynomial-time quantum attack breaks Module-LWE over power-of-2 cyclotomic rings, threatening the security foundations of multiple post-quantum cryptography candidates proposed for standardization.