> DO roll your own crypto [1] for learning, m Do explicitly and loudly label such work as such. I've encountered important professionally produced pieces of s

> DO roll your own crypto [1] for learning, m Do explicitly and loudly label such work as such. I've encountered important professionally produced pieces of software using 'crypto' code that was just whatever google turned up on github and was actually a student work from a student that didn't have it sufficiently right. Unfortunately there is also plenty of bad stuff that explicitly claims that it is good, but at least we can make people's lives a little easier by labelling learning experiments as such. :) Sadly, writing something is only so informative. Everyone can write a cryptosystem that they themselves can't break. :) Creating something that you think is secure and have other people break it is much more informative, but review is so costly that most people that get these lessons get them too late. Similarly, breaking someone elses system is extremely informative, but it has an extremely steep learning curve!