I'm suggesting that "seems fine so far" is not effective at evaluating solidity of cryptographical usage.