Comment Re:seriously - who certified or tested this (Score 2) 25
40 bit is within reach of practical guessing attacks. 128 bit is not, but just barely (the limit where it becomes reliably unguessable is somewhere in the 80...100 bit range). If you are serious about things you use at the very least 256 bit. And, obviously, you do independent expert review on any major change. This one is so abysmally insightless and bad, it may well have been an intentionally placed backdoor. I wonder whether they can still reliably say who did the change.
As to who certified that, this is the crapto space. Where everything is easy, nothing needs to be certified and stupid is the name of the game.