@elithebearded @drwho @josephcox Yes—see "Rule 1" at https://grokipedia.com/page/Robert_Morris_(cryptographer). (I learned a hell of a lot about real-world security from Morris, despite fairly limited contact with him. He's likely to be one of the dedicatees of a security book I'm working on now—but don't expect to see the book for a couple of years…)