The U.S. government invented INFOSEC and funded most tech (security or otherwise) that you depend on. So what. It&#x27;s the <i>specific tech or actions</i> that matter rather than who funds them. At worst, you increase scrutiny or consider subversion issues. Of course, high assurance is specifically designed to counter that. So, people worried about subversion should be using this stuff more than anyone.<p>Btw, here&#x27;s two things Galois did with their contracts that mainstream security folks are mostly ignoring instead of building on or applying:<p><a href="http:&#x2F;&#x2F;www.cryptol.net&#x2F;" rel="nofollow">http:&#x2F;&#x2F;www.cryptol.net&#x2F;</a><p><a href="http:&#x2F;&#x2F;ivorylang.org&#x2F;" rel="nofollow">http:&#x2F;&#x2F;ivorylang.org&#x2F;</a><p>And a repo with the rest that uses the magical power of open source to counter people&#x27;s fears and improve the world:<p><a href="https:&#x2F;&#x2F;github.com&#x2F;galoisinc" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;galoisinc</a><p>At least some of them have stars in the three digits. I&#x27;m impressed an open-source crowd giving it that much attention. Maybe cuz it&#x27;s on GitHub. The rest might need to go on there, too, for better odds of adoption. Using Google and Save As... are apparently major obstacles of adoption these days. Idk as I&#x27;m still trying to figure it out.