Here is a review left by a customer on a product. Would you say he was satisfied or dissatisfied?
Title: masterful work, loads of info, well written
Review: A masterful work. Bursting with loads of useful information, always gets right to the point, has just the right density of code examples, and is extremely well organized and well written (with one exception -- see below). Should be on every expert programmer's bookshelf. Even if you never need to do crypto in your programs, get this book and at least read all the "Problem" and "Solution" sections -- it'll only take a couple of hours, and you will be much smarter after you are done. I have only two complaints. First, section 10.1 on PKI is uncharacteristically sloppy, annoyingly redundant, and in a few places literally unparseable. Second, the authors, like the authors of every security textbook I've ever read, seem to believe that real C programmers will actually use things like the safestr library instead of nul-terminated arrays in their programs. Not going to happen, folks.
