Peter Gutmann: Lessons Learned in Implementing and Deploying Crypto Software. USENIX Security Symposium 2002: 315-325