Your criticism of the messenger of further evidence of djb's longstanding refusal to deal straightforwardly with security reports is not on topic, IMO.
Not everything is a simple dichotomy.
Not everything is a simple dichotomy.
Regarding the salsa20 implementation: I just mentioned in my previous message why this was not a bug and the only reason that people were upset over it was due to Filo's incompetence.
As for evidence of DJB dealing straightforwardly with security reports: https://news.ycombinator.com/item?id=23250748
I think that https://old.reddit.com/r/crypto/comments/72w42c/statement_re... would be a better example of DJB not properly handling security reports.
Incompetence is a strong word on the wrong target...
There is no official public repository. It gets released in tarballs.
This does indeed make him seem slightly less incompetent though.
> which is vary bad for security
It is a framework for benchmarking cryptographic algorithms.