See, this is what upsets me about this situation. Bernstein has managed to get you to a point where you think NSA "proposed" MLKEM, or had some hand in its design. That's not remotely what happened. A team of European cryptographers, including a famous former longtime collaborator of Bernstein himself, designed CRYSTALS/Kyber, which was selected by NIST in an open competition (where progress through the competition was based on open academic cryptanalysis work) to become MLKEM.
Bernstein is counting on you not knowing that, even though it's a very rudimentary fact about MLKEM.
It bothers me that he thinks so little of his audience.
Bernstein is counting on you not knowing that, even though it's a very rudimentary fact about MLKEM.
It bothers me that he thinks so little of his audience.