@freakazoid The bigger problem is that manufacturers cannot actually be trusted to do this right and so implementations constantly get broken, regardless of what the cryptographic model is on paper