2022.08.28 08:33:42 (1563776820364734464) from Daniel J. Bernstein:
Bits in DRAM sometimes flip. Typical servers have SECDED ECC DRAM to protect against this, but typical desktops/laptops/smartphones don't. Have released a "libsecded" micro-library with secded_encode() to protect an array and secded_decode() to recover it: https://pqsrc.cr.yp.to/downloads.html
2022.08.28 08:39:02 (1563778162734944256) from Daniel J. Bernstein:
Of course, have to worry about the possibility of bugs in libsecded doing more damage than bit flips. The software passes many tests (and is also checked against a simpler Python implementation), but those aren't comprehensive. Planned formal verification is still future work.