The microblog: 2022.04.09 14:07:10

2022.04.09 14:07:10 (1512764051771650051) from Daniel J. Bernstein, replying to "Nadim Kobeissi ( (@kaepora)" = "Nadim Kobeissi (@kaepora)" (1512729659200389122):

FOIA request prompted a release clearly covering this: "Among the remaining, structured lattice schemes, our assessment was that cyclotomics (esp power-of-2 cyclotomics) are the clear 'community standard' * So, we moved Kyber, Saber, NTRU on as Finalists, but kept NTRU prime too"

2022.04.09 14:12:18 (1512765344653316099) from Daniel J. Bernstein:

Here's the full document (plus metadata from the relevant NIST employee saying it's in response to my FOIA request): NIST had previously hidden this information about its handling of NTRU Prime. So "revealed" seems like exactly the right word.


2022.04.09 09:20:51 (1512691997609320449) from Daniel J. Bernstein:

For all the people asking: NIST has consistently said that its first selection will be a subset of {finalists,SPHINCS+}, while other candidates such as NTRU Prime won't be eligible until 2023. A FOIA request revealed why NTRU Prime isn't a finalist; see

2022.04.09 11:50:30 (1512729659200389122) from "Nadim Kobeissi ( (@kaepora)" = "Nadim Kobeissi (@kaepora)":

“Revealed” is a strong word, given the actual information gleaned…