It’s perplexing that NIST chose to burn so much trust and goodwill with the independent cryptography community instead of just explaining empirically that they really had nothing up their sleeve.

Thank god NIST gifted us Dual_EC_DRBG, so I still have a NIST Elliptic Curve effort I can sneer at dismissively.

RSA was good enough for my grandfather, and it's good enough for me.

But why that specific timestamp? They probably kept trying different timestamp hashes until they found one with a vuln