Maybe he's arguing for implementations that are provably correct, but I don't think DJB is a big fan of "provable security". https://twitter.com/hashbreaker/st

Maybe he's arguing for implementations that are provably correct, but I don't think DJB is a big fan of "provable security". https://twitter.com/hashbreaker/status/294465109613477889 https://twitter.com/hashbreaker/status/294465109613477889, "Some evidence that "provable security" is negatively correlated with actual security: http://cr.yp.to/talks/2013.01.23/slides.pdf http://cr.yp.to/talks/2013.01.23/slides.pdf "