Independent cryptographic review of PRML | Manifund