Debunking NIST's calculation of the Kyber-512 security level