2017.01.17 14:52:53 (821354610480836608) from Daniel J. Bernstein:
Overheard; folklore? Lattice-based NIKE: param R, pubkeys aR+2e, Rb+2f share secret aRb mod 2; use large enough q/noise to avoid wraparound.