looks good, but i'd do libsec at the same time. unless you know of a compelling reason for these to support a different set of algorithms?