Bad press can kill a primitive even if it's incorrect. The Keccak guys had this happen to them with Noekeon. They're still sore over it, presenting this about

Bad press can kill a primitive even if it's incorrect. The Keccak guys had this happen to them with Noekeon. They're still sore over it, presenting this about 10 years later: https://www.cryptolux.org/mediawiki-esc2010/images/7/7a/Noekeon-ESC.pdf https://www.cryptolux.org/mediawiki-esc2010/images/7/7a/Noek... To be honest, if I'd design something this elegant, and nobody considers if because of an irrelevant attack, I'd be very sore and alert for it happening again, too.