I get the impression crypto is very hard to implement right, which would mean it's very hard to evaluate.