Since I can't edit, noting here that the minimum key size required here was 80 bits, so apparently the 32-bit-block version was never really considered. Yay! (S

Since I can't edit, noting here that the minimum key size required here was 80 bits, so apparently the 32-bit-block version was never really considered. Yay! (Search for 'ISO' in https://iadgov.github.io/simon-speck/papers/Algorithms-to-Support-the-Evolution-of-Information-Assurance-Needs.pdf https://iadgov.github.io/simon-speck/papers/Algorithms-to-Su...) The Reuters story made it sound a bit like this was a topic of debate, when the IAD doc makes it sound like more of an assumption from the start. The grump in me still sees a pretty narrow niche for this sort of algo (like, maybe most considering it should just be using AES?), but whatever.