The lab's cryptanalysis of the 119 candidates submitted to the NGCC call, 84 public-key schemes (34 signatures, 41 KEMs and 9 key exchanges) and 35 hash functions: attacks on the designs, rated by what they cost against what the designers claim, and the bugs met in the submitted code.
About
The candidates
The 119 round-1 candidates (signature schemes, key encapsulation mechanisms, key exchanges and hash functions) were submitted to the call of the Institute of Commercial Cryptography Standards (ICCS) for next-generation commercial cryptographic algorithms. Their specifications and reference implementations are published on the NICCS site.