One worry that is always on my mind when using ssl/ssh implementations outside the beaten path is that it's hard to know if the crypto is done right. For other

One worry that is always on my mind when using ssl/ssh implementations outside the beaten path is that it's hard to know if the crypto is done right. For other types of software it's easy to tell if something is broken - things crash visibly. But with crypto, things may appear to work and interoperate correctly - but there could still be a fatal invisible flaw such that everything becomes trivially decryptable or accepts authentication with trivially fakeable key pairs, and so on. Not only do you have to make it work, you have to make it flawless in the invisible. I'm not picking on this project in particular - it could be excellent for all I know - but it's always a nagging concern...