In his blog post, he writes:
"The SHA256 algorithm provides for a maximum message size of (2^128 - 1) bits of information whilst returning 32 bytes or 256 bits as an output value. The number of possible messages that can be input into the SHA256 hash function totals (2^128 - 1)! possible input values ranging in size from 0 bits through to the maximal acceptable range that we noted above."
There are two obvious errors in this paragraph. The maximum message size of SHA-256 is (2^64 - 1) bits and the total number possible input messages is (2^(2^64) - 1). I doubt that the inventor of Bitcoin would make such fundamental mistakes.