I'd like this test to also verify that the `bit_length` requested is what the backend generates. Historically there have been issues in some crypto libraries where you requested an n-bit key and you'd occasionally get n-1 (e.g. older Java).