Comment by MichaelGG

If your encryption key generation security depends on people not knowing how you generate keys, then it's totally busted.