# Gavin Andresen
# 2014-12-03 13:45:50
# https://bitcointalk.org/index.php?topic=881304.msg9727670#msg9727670

Excellent advice. @p{par}

I'd add: you never have infinite time, so you will have to prioritize. @p{par}

Cryddit's original post talks a fair bit about preventing data leakage in side-channel attacks; I'll just say that if you only have time to either get 100% code path unit test coverage or hand-code some assembly to workaround your compiler leaving a private key in memory instead of a register... I'd work on the test coverage. @p{par}

And if the choice is between 100% test coverage versus 91% with support for threshold signatures on multiple devices@p{--} I'd choose threshold signatures. @p{par}

And, of course, the highest priority is creating a product or service that is both trustworthy and that people want to use. @p{brk}