If the failure were discovered by you a year later, realizing that all you thought was protected was in an adversary's hands. I'm suggesting that "seems fine

If the failure were discovered by you a year later, realizing that all you thought was protected was in an adversary's hands. I'm suggesting that "seems fine so far" is not effective at evaluating solidity of cryptographical usage.