> It doesn't matter that this algorithm was backdoor-free. I'd rather see the community reject all NSA-proposed projects by default than let some of the backdoo

> It doesn't matter that this algorithm was backdoor-free. I'd rather see the community reject all NSA-proposed projects by default than let some of the backdoor-enabled ones sneak in once the NSA is "trusted" again. Politically, I'm inclined to agree. But the technical merits should be commented on as well. That's what Thomas's comment did. > Speaking of which, is the NSA guy still running the crypto review group at the IETF? Which is "the NSA guy" and how is he running the show? > If so, how is that still a thing?! For the same reason that the guy peddling the Crystalline cipher is still allowed to participate with the IETF. There's really no lock-out. > The NSA has made it clear in many more occasions than in the Dual_EC situation that they are the enemy of crypto, not its friend. I think that's more than enough reason to distrust all NSA projects by default. That sounds good on paper, but you're not advocating "distrust ... by default" in every part of your comment before this snippet. Your words are coming a cross as more on the "distrust ... forever" side. And I'm left wondering which of the two you actually want.