plexus-cipher: insufficiently random salt

These bugs just decreases the randomness of the salt/IV, so they may not actually result in an exploitable security vulnerability. But that depends on how this class is used.

See the Red Hat bugzilla for details.