[Cryptography] Heartbleed and fundamental crypto programming practices

[dan at geer.org]

W.r.t. programmatic code analysis, false positives, and so forth
 
Heartbleed and Static Analysis
http://blog.regehr.org/archives/1125

A New Development for Coverity and Heartbleed
http://blog.regehr.org/archives/1128

both due to John Regehr, Univ of Utah
 

--dan