Weird coincidence. I work on a software cryptographic module and we worked on this exact same thing today and came to a similar solution.