Imagine you're writing a message on two postcards and handing each to a different courier. Each courier can scribble on their postcard however they like — but they can't talk to each other during transit. A non-malleable code guarantees that when you reassemble the postcards, you either get your original message back or something completely unrelated — never a controlled edit. Now give those couriers a pair of magic dice that always land the same way (quantum entanglement). The old guarantee breaks. This paper rebuilds it. The committed claim: there exists an efficient, information-theoretic non-malleable code for arbitrary classical messages that achieves rate at least 1/5 − ξ against two noncommunicating quantum tamperers sharing arbitrary pre-shared entanglement, with negligible error 2^{-n^{Ω(1)}}. This resolves the constant-rate question for worst-case messages in the entangled two-split-state model. The construction is deceptively simple in architecture. It builds on the permutation-based two-split construction of Batra, Boddu, and Jain (2024), which already achieved rate approaching 1/5 — but only for uniformly random messages. That's a critical limitation: in cryptography, you need security for the worst-case message, not just a random one. The fix here is to replace the uniform input to the permutation with the actual message concatenated with fresh uniform padding. The heavy lifting is in proving that this substitution doesn't break security — a worst-case reduction that constitutes the paper's main technical contribution. Where does this sit on the ladder? The Batra-Boddu-Jain construction is the direct predecessor and achieved the same 1/5 rate but only for uniform messages. For worst-case messages in the classical (no entanglement) split-state model, rate 1/3 codes have been known. The entangled model is strictly harder because the tamperers have more correlated power. Achieving constant rate at all in the entangled setting was the open problem; hitting 1/5 closes it. The gap to 1/3 (the classical-tampering rate) remains open and may be fundamental. Integrity is strong for a theory paper. The result is a mathematical proof — no simulations, no experiments, no benchmarks to cherry-pick. The security reduction is information-theoretic, meaning it doesn't rely on computational assumptions that could be broken by future hardware. The proof uses a single message-independent simulator per attack, which is the gold standard for non-malleability. The main risk is in the proof's correctness itself, which awaits peer review and independent verification. The milestone to watch is rate 1/3 in the entangled model — matching what's achievable classically. If the 1/5 barrier is inherent (entanglement truly costs you rate), that's a deep structural insight about quantum vs. classical tampering power. If someone pushes past it, the cost of entanglement is merely a proof-technique artifact. Either answer is significant. The obvious next experiment the authors didn't run: extending to quantum messages (not just classical messages encoded against quantum tampering). This is almost certainly a difficulty problem — the techniques for handling quantum message content against entangled adversaries are substantially harder, and the authors likely know the current machinery doesn't extend cleanly.
