[bsder]

> My impression has always been that what we get from DJB is some wacky implementation written in a language of his own devising

Go look at TweetNaCl. It's a very small, very clear implementation.

In my opinion, the reason why djb was always doing "wacky" stuff was because everybody was always bashing him for being the slowest (it's hard to compete with an AES primitive in hardware).

Suddenly, however, performance isn't the boogeyman that it was when nobody else has any useful crypto.