2014 has seen epic failures of crypto implementations, new projects created in reaction to those failures, which sometimes lead to even more failures: I'll talk about Heartbleed, OpenSSL, LibreSSL Truecrypt, and others, and will present simple guidelines to reduce the risk of crypto bugs, based on the Crypto Coding Standard recommendations.