Retr0id a day ago

There's a $20,000 USD bounty on breaking this implementation (see the main README). I'm going to give it a go.