...determination, patience and practice are key factors. In fact it's always essential to get an independent evaluationof any complex design, such as cryptographic algorithm. Often the originator is too close to see the flaws. And there...
http://www.computerweekly.com/blogs/david_lacey/2008/05/security_mindset.html