@whitequark Right, correct wording is that it’s _notoriously_ prone to erroneous implementation, especially in C and especially when not using DER