I was skeptical, but then saw: author Thomas Pornin Yeah, "should not implement ...

btown · on Nov 3, 2016

From his CV http://www.bolet.org/~pornin/cv-en.html :

    AES (Advanced Encryption Standard, 1997 to 2000): co-author of the block cipher DFC
    eSTREAM (ECRYPT Stream Cipher Project, 2004 to 2008): co-author of the stream cipher SOSEMANUK (admitted in the final portfolio)
    SHA-3 (2007 to 2012): co-author of the cryptographic hash function Shabal (selected for second round)
    PHC (Password Hashing Competition, 2013 to 2015): author of the password hashing function Makwa (finalist, was awarded a "special recognition")
    Author of the sphlib library: optimized implementations of many cryptographic hash functions, both in C and Java.
    Author of RFC 6979: Deterministic Usage of the Digital Signature Algorithm (DSA) and Elliptic Curve Digital Signature Algorithm (ECDSA).

Yeah, doesn't apply to him.

mythz · on Nov 3, 2016

Definitely, most of my crypto searches ends up landing on one of his answers :)

hbbio · on Nov 3, 2016

And you are Dmitry! We use your TweetNacl-js implementation for https://github.com/wallix/PEPS!

avhon1 · on Nov 3, 2016

After a little bit of looking around on the internet, I think I agree.