2022.04.09 14:07:10 (1512764051771650051) from Daniel J. Bernstein, replying to "Nadim Kobeissi (@nadim@symbolic.software) (@kaepora)" = "Nadim Kobeissi (@kaepora)" (1512729659200389122):
FOIA request prompted a release clearly covering this: "Among the remaining, structured lattice schemes, our assessment was that cyclotomics (esp power-of-2 cyclotomics) are the clear 'community standard' * So, we moved Kyber, Saber, NTRU on as Finalists, but kept NTRU prime too"
2022.04.09 14:12:18 (1512765344653316099) from Daniel J. Bernstein:
Here's the full document (plus metadata from the relevant NIST employee saying it's in response to my FOIA request): https://archive.is/RG14h NIST had previously hidden this information about its handling of NTRU Prime. So "revealed" seems like exactly the right word.
2022.04.09 09:20:51 (1512691997609320449) from Daniel J. Bernstein:
For all the people asking: NIST has consistently said that its first selection will be a subset of {finalists,SPHINCS+}, while other candidates such as NTRU Prime won't be eligible until 2023. A FOIA request revealed why NTRU Prime isn't a finalist; see https://ntruprime.cr.yp.to/latticerisks-20211031.pdf.
2022.04.09 11:50:30 (1512729659200389122) from "Nadim Kobeissi (@nadim@symbolic.software) (@kaepora)" = "Nadim Kobeissi (@kaepora)":
“Revealed” is a strong word, given the actual information gleaned…