there is quite a heated argument in the NIST comments regarding kyber. DJB is not impressed with how they calculated some kind of security bound. The kyber folk

there is quite a heated argument in the NIST comments regarding kyber. DJB is not impressed with how they calculated some kind of security bound. The kyber folks (and maybe some others) seem to think DJB is a prick. This is so far above my pay grade that I don't know what to think. DJB has a tendency to be right, but then again: he is the kind of guy that checks the return value of printf even in non-critical paths. As one wants a crypto guy to be, I guess...