Fix Repeating Nonces

[NHAS]

An extension to #291, and (hopefully) full solution to #289

This change the random data generation to a cryptographically secure source and implements a repetition resistant nonce generation algorithm, which handles some edge cases where nonce reuse might occur.

This needs a bit of a look over to make sure its both backwards compatible and not missing anything.