“NIST’s underlying calculation of the security level was a severe and indefensible miscalculation.”
NIST justified standardizing Kyber-512 with a security estimate that multiplied two costs that should have been added. A secret 2016 document listed more NSA people on the [email protected] team than NIST people. NIST’s public line is that it alone makes the decisions. It took two FOIA lawsuits to find out who was in the room.