Pure lisp crypto, written from specs