I don't know what it guarantees, but I think a lot of people rely on tools like openssl: https://github.com/openssl/openssl