I feel like your conclusion is the opposite of proper.<p>Proper would be: don&#x27;t roll your own crypto, use what professionals created, and only in the way they document it to be used. When in doubt, email tptacek or another professional he would point out.