Traditionally this would have been written in something like C, which, while conventional, is hardly solid in security-sensitive contexts like this one.