[sp332]

This guidance has been around since 2006 and I don't remember anyone having a better idea since then.

[tedks]

I think knowing that the NSA has some influence on NIST means you have to treat all actions by NIST as possibly the result of NSA pressure, and thus treat everything NIST does as suspect.