It is probably time for an audit of code submits to the encryption libararies in open source projects.