This Bernstein crap drives me up the wall because IT MAKES NO SENSE.
Why would the NSA be picking weak crypto to protect US NatSec?!
They have mathematicians and clusters in China, too!
Dual_EC_DRBG was a NOBUS backdoor. There is NOWHERE to hide a NOBUS backdoor in ML-KEM. Look at the code, there is nothing even remotely public key shaped.
