for some context, this was released by ANSSI, which as far as I can tell is a French government communications and computer security organization. They've done a lot of interesting work with security and OCaml as well: http://www.ssi.gouv.fr/agence/publication/lafosec-securite-e...