Florian Hartwig

I think using `unwrap_or(specific_value)` is generally better than `unwrap_or_default()` because it's clearer and doesn't require the reader of that line to know what the default value of the relevant type...

For the reading list: http://www.scs.stanford.edu/~deian/pubs/giffin:2012:hails.pdf talks about labels in the context of a web framework, which might be helpful as an example for our use case.

This example might be interesting for the reading list as well: https://github.com/scslab/lio/blob/master/lio-simple/tutorial/blog-2-tutorial.md#secrecy-policy-drafts-are-only-readable-by-authors

Cryptonite doesn't seem to do nonces. Also, nonce generation (i.e. randomness) seems to be the only thing that we use cryptonite for, so we could probably drop that dependency if...

Some additional points: - in general, timing attack vulnerabilities are caused by timing of operations being dependent on secret data. This means that to protect against them, we have to...

### Current status I initially wanted to use the test infrastructure that comes with the purescript tools (so we could just `pulp test` to run the tests). The problem with...