When it comes to this stuff you generally have to follow advice from someone who understands what is going on. For me, personally, I'm going to side with tptac

When it comes to this stuff you generally have to follow advice from someone who understands what is going on. For me, personally, I'm going to side with tptacek - he has a track record that I have seen over at least a decade if not two. I don't know the other bloke but this is a bit of a worry: "I'm not a cryptographer".