There is great stuff in here, including the CTR nonce reuse bug that Nadim wrote about earlier. Ouch.