@ainmosni @dalias @hipsterelectron Tbf, I've seen many constructions that are insecure even though the primitives where fine. They were just misused. Those primitives ranged from wrong application of SHA2, to PBKDF2 to just using GPG wrongly...
But yes, learning things and trying to do new things with crypto is absolutely fine. But *please* ask a cryptographer latest when you are dealing with data from other people.