The algorithms are free. The $15 billion is discovery, hardware replacement and re-certification — and small institutions will not be paying it.
Three standards finalised, deadlines from September. The blocker is that nobody knows where their cryptography actually is.