[rms]

For what it's worth, we also trust the NSA to have written and verified our most important cryptographic hash functions, leading to the first rule of crypto -- never roll your own novel hash function.

I see this as the start of a community effort to verify Intel SGX. I imagine that the process of rolling out a consumer facing high stakes product on SGX involves external verification of SGX beyond what it's gone through before.