Use openssl_random_pseudo_bytes() for private keys, and check that they are less than order(G)