Why are you defending this work Matthew? You have your own reputation to defend as well. This code has never been peer reviewed, ever. That is indisputable bec

Why are you defending this work Matthew? You have your own reputation to defend as well. This code has never been peer reviewed, ever. That is indisputable because Ferguson has claimed multiple times that the code is/was entirely undocumented, and nobody outside him and his few colleagues understands how it works. The moment it started being actually reviewed, people found a breathtaking number of bugs like out-of-bounds reads, typos in random number generator constants etc. Broken RNGs! Of all things I'd hope an expert in cryptography would be very worried by, a missing digit in an RNG constant should surely be one of them?