cperciva, how come your code never includes a test suite? At the very least, every implementation of sha256, hmac-drbg, aes, and any other crypto primitive should come with tests based on the publicly available test vectors. Your implementations don't include these tests. Perhaps you run tests before releasing code, but that is not very reassuring. Please distribute tests with your code.