Mar 19, 2018 08:55
I'm afraid this would just give a false sense of security, no? If the spec doesn't guarantee that it's cryptographically secure, you simply can't rely on it. The fact that some implementations are more secure than required doesn't change that; it merely moves things from "definitely insecure" to "probably insecure".