a) Consistency and standards are important b) I'm not sure if such a test really proved anything. Crypto is hard, we don't like to do experiments, it may take

a) Consistency and standards are important b) I'm not sure if such a test really proved anything. Crypto is hard, we don't like to do experiments, it may take time for larger orgs to accept new crypto. c) The standard algs were almost assuredly 'good enough' for the job. By introducing new tech, you introduce risk, fragmentation etc.. In the bigger picture, the regulators were probably correct. They were keeping the system pragmatically 'more secure' even if not so much on a theoretical basis. There are examples of bad bureaucracy, this isn't one of them I think.