I get what you're saying. But I think this is a case where simplification and rewrites is going to greatly enhance the ability to effectively audit the code. I

I get what you're saying. But I think this is a case where simplification and rewrites is going to greatly enhance the ability to effectively audit the code. I will trust LibreSSL audits about a hojillion times more than OpenSSL audits at this point, just down to code complexity and surface area alone. And there is no question about it they absolutely will introduce new bugs. But hopefully the increased scrutiny and easier to read code means that they are less likely to have extremely bad bugs latent in the codebase for years without anyone noticing, as has been the case with OpenSSL.