domi , 2 months ago

I'm not OP but NIST is a very shady institution for various reasons:

• They actively work with and for the NSA
• Leaked papers have shown that they included a backdoor for the NSA at least once ( https://en.wikipedia.org/wiki/National_Institute_of_Standards_and_Technology#Controversy_regarding_NIST_standard_SP_800-90 and https://en.wikipedia.org/wiki/Dual_EC_DRBG#Weakness:_a_potential_backdoor )
• Many cryptographers are suspicious of the NIST and their selection process, e.g. Daniel Bernstein (the guy who made ED25519) is currently suing the NIST for various infringements ( https://blog.cr.yp.to/20220805-nsa.html )

Use anything NIST related with care. Use ED25519 or if not available, RSA with large key sizes (4096+).