“Unless they have been independently tested, we don’t know that they have made a correct choice and implemented a good algorithm, and use appropriate methods to generate and distribute keys,” according to Eugene H. Spafford, a computer science professor at Purdue University.