be more graceful against bleichenbacher (use a random premastersecret,

otherwise an attacker might learn bits of if (don't expose
differences between padding_failure and decryption_failure)