The root problem is that cryptography is not usable without some understanding. In the latest days we developed an addiction for &quot;best practices&quot; like &quot;use bcrypt&quot;, &quot;use &#x2F;dev&#x2F;random&quot; or alike which in the field of cryptography are not enough: understanding is the only possible path. Actually, this is true for most things, it just shows up more obviously in the field of cryptography because of the security concerns. So we should replace &quot;use bcrypt&quot; with &quot;Read Applied Cryptography &amp; other books&quot;.