Use openssl_random_pseudo_bytes() for private keys, and check that they ...

...are less than order(G)