moved secure random swap into the sjcl.js