This is a very good paper and it&#x27;s disappointing that it didn&#x27;t get higher on HN.  
That being said I disagree with some of paper&#x27;s points.  I don&#x27;t believe that cryptographers should take on moral responsibility for how they perceive their work may or may not be used.  If a malware writer uses XTS to lock up a hard drive should Dr Rogeway be morally responsible for that since he helped create the constructions for XTS?   I would argue &quot;no&quot; because there is a moral separation between idea and implementation.   We should not burden cryptographers with moral baggage that should be placed on the people who implement or set policy to implement.