Standardizing Bad Cryptographic Practice