drop the dependency of `System.Security.Cryptography`

[vang1ong7ang]

in the discussion of #3220 it is tried to explore the possibility of moving to BouncyCastle

for performance reasons, many prefer keeping System.Security.Cryptography instead of moving to BouncyCastle

however, I don't think this is a rational decision

the only reason is that:

System.Security.Cryptography behaves inconsistently across platforms and it may lead to FORK