You'll recognise me from the CFRG threads about that topic. The subject is moot now: Kevin M. Igoe is retiring, so he's stepping down at the end of the year (a

You'll recognise me from the CFRG threads about that topic. The subject is moot now: Kevin M. Igoe is retiring, so he's stepping down at the end of the year (and probably not doing anything major until then, other than participating as anyone else could, with of course full knowledge of where he works). The other current co-chair is also stepping down, in favour of two new unrelated co-chairs who have been extremely open and forthright with their status - and, to the best of my knowledge, don't work for a Nation State Adversary. Things seem to have turned out okay. In the meantime, CFRG has been documenting - in the public eye - a ChaCha20-Poly1305 AEAD (the djb alternative to the NIST-preferred AES-GCM; a fast, 256-bit secure constant-time authenticated stream cipher AEAD) and has, after a lively discussion, selected djb's Curve25519 (the most mature of the so-called "SafeCurves") as the preferred curve for new IETF protocols; amongst some other lively and open discussion about the promises and perils of PAKEs, signature schemes and other such things. They'll be coming to protocols near you soon: various WG drafts are in progress now.