I think we can revisit OP: > However the way this standardization worked - and several others before, like AES and SHA-3 - is that NIST made a public competiti

I think we can revisit OP: > However the way this standardization worked - and several others before, like AES and SHA-3 - is that NIST made a public competition. They basically asked everyone to submit proposals and then asked everyone to find flaws in theses proposals. > These competitions have a very good reputation in the cryptographic community. A very brief google search provided citations to the proposals and counter-attacks for your perusal. https://en.wikipedia.org/wiki/NIST_Post-Quantum_Cryptography_Standardization https://en.wikipedia.org/wiki/NIST_Post-Quantum_Cryptography...