_Security Code Review observation:_ For example, it seems the shuffle tests are not testing the verification of a wrong shuffle nor providing test-vectors.