Have you considered asking Bruce Schneier? Because the rebuttal to "here's a contest, show that what I'm doing is insecure" is his, not mine.