2021.09.09 01:22:34 (1435745406181273603) from Daniel J. Bernstein:
Let's review. 2016-2020: NSA doesn't admit its involvement in NISTPQC. 2020.07.22 15:03: First NSA message (https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/um_1oBVCtjU/m/vhTAdxp7BgAJ). 2020.07.22 22:51: NIST announces round 3 (https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/0ieuPB-b8eg/m/Cl7Ji8TpCwAJ). NSA now says: Use lattices (https://www.nsa.gov/what-we-do/cybersecurity/post-quantum-cybersecurity-resources/) and PLEASE TURN OFF ECC. https://twitter.com/mjos_crypto/status/1433443198534361101
2021.09.02 16:54:25 (1433443198534361101) from "mjos\dwez (@mjos_crypto)":
(live from ICMC) NSA Doesn't like hybrid. They're going to go with NIST PQC pretty much as-is.