For reference, Colin's 2009 "Cryptographic Right Answers" blog post is here: http://www.daemonology.net/blog/2009-06-11-cryptographic-rig...