[FiloSottile]

Uh, yeah, this is not the writing of someone with the experience to maintain a cryptography toolkit: https://kerkour.com/nist-cryptography-backdoor

(I’m more worried about judgement calls than implementation correctness, it’s not about AI.)

[tptacek]

Hah, length-extension and CBC mode, famous NIST backdoors.