I think the use of the std::mt19937 PRNG is a potentially security sensitive code should at least be analyzed.