On Fri, Aug 09, 2019 at 09:33:14PM +0000, Pascal Van Leeuwen wrote: > Real life designs require all kinds of trade-offs and compromises. > If you want to make something twice as expensive, you'd better have a > really solid reason for doing so. So yes, I do believe it is useful to > be sceptical and question these things. But I always listen to good > arguments, so just convince me I got it wrong *for my particular use > case* (I'm not generally interested in the generic case). Or rather, if you want to take shortcuts and incorrectly implement a crypto construction, you'd better have a really solid reason for doing so. It's on you to show that your crypto is okay, not me. - Eric