Early on in the implementation of one of the PKCS "standards" while at a browser company many years ago, due to an improper interpretation of a spec that was st

Early on in the implementation of one of the PKCS "standards" while at a browser company many years ago, due to an improper interpretation of a spec that was still in flux. There wasn't enough testing and "release bits" went live. I had to quickly get a patch in for the improper code and had to maintain that buggy implementation. In addition, the "standard" itself got a rather scathing write up from Peter Gutmann, which is completely valid: https://www.cs.auckland.ac.nz/~pgut001/pubs/pfx.html https://www.cs.auckland.ac.nz/~pgut001/pubs/pfx.html This is a critique on the "standard" itself, the process was just as ugly.