> * Explicit nonces make it easier to "backdoor" crypto implementations. That's an interesting point. Do you mean simply in the sense that a backdoored RNG would result in more catastrophic effects than otherwise? Or do you have something else in mind?