It can&#x27;t be taken for granted that performance and correctness are separate concerns. Even leaving aside the obvious category of realtime applications, performance issues can create DoS vulnerabilities.<p>edit: That being said, a boringcc might end up being <i>less</i> susceptible to these vulnerabilities in practice, since the performance of the emitted code might be more predictable. I&#x27;m sure djb has considered this. But in general I think it&#x27;s often a mistake to think of performance as an implementation detail rather than as a deliberate feature.