> Can we, instead, decare a moratorium on importing any cryptographic or
> PRNG code from OpenBSD, until *after* the code has been reviewed, and
> until *after* the code has passed *empirical testing*?

And after the code as been shown to close a potential security problem.

You need to do a cost-benefit analysis on the algorythm.  This particular
code has lots of cost and almost no benefit.

	David

-- 
David Laight: david@l8s.co.uk