ABSTRACT: I will explore the question of how people can have confidence that their abundant cryptography is any good. Other industries (such as aviation and pharmaceuticals) have done a fair job of solving this problem through a combination of government regulations and self-control (usually to limit liability). Government involvement is particularly complex, since governments have a long history of trying to discourage the deployment of good crypto. Legal liability for product vendors is a related and similarly complex area. On one hand, industries where vendors face liability risks tend to be carefully self-regulated, but lawsuits are also a deterrent to innovation and deployment of low-cost systems.