As in my other comment, something like that can be mathematically verified for correctness as well. That requires simplicity if one doesn't want to throw person

As in my other comment, something like that can be mathematically verified for correctness as well. That requires simplicity if one doesn't want to throw person-years of work at it w/ possibility of finding out it was impossible. My comment links to a formally-verified checker for NaCl as well. https://news.ycombinator.com/item?id=14460649 https://news.ycombinator.com/item?id=14460649