[Cryptography] how reliably do audits spot backdoors?

[James A. Donald]

I don't think a backdoor is likely to survive a serious audit.  Code 
audits, done right by competent people, are tough.

Though, done right, they are expensive.

If crypto code is open source, most people will use it without careful 
examination on the assumption that someone else is going to audit it.

But, some people, relying on that code, *are* going to audit it.