To expand on this, here are a few mistakes that I caught while scrolling quickly:<p>&gt; For production applications some AES variant or RC4 would be a better choice.<p>RC4 is not at all a good choice for new applications[1].<p>&gt; SHA1<p>SHA-1 is broken (although not as badly as MD5).  SHA-2 or SHA-3 should be preferred.<p>&gt; 800-bit RSA<p>800 bits is alarmingly low.  Browsers are currently upgrading from 1024-bit certificates[2].<p>[1] <a href="http:&#x2F;&#x2F;blog.cryptographyengineering.com&#x2F;2013&#x2F;03&#x2F;attack-of-week-rc4-is-kind-of-broken-in.html" rel="nofollow">http:&#x2F;&#x2F;blog.cryptographyengineering.com&#x2F;2013&#x2F;03&#x2F;attack-of-we...</a><p>[2] <a href="https:&#x2F;&#x2F;blog.mozilla.org&#x2F;security&#x2F;2014&#x2F;09&#x2F;08&#x2F;phasing-out-certificates-with-1024-bit-rsa-keys&#x2F;" rel="nofollow">https:&#x2F;&#x2F;blog.mozilla.org&#x2F;security&#x2F;2014&#x2F;09&#x2F;08&#x2F;phasing-out-cer...</a>