I wrote a brain dump about my thoughts on that here: https://www.cryptologie.net/article/437/on-real-world-crypto...
tl;dr is "I'd say the problem is in the reaction, not in the published analysis."
tl;dr is "I'd say the problem is in the reaction, not in the published analysis."