Does shuffle() produce uniform result ?

[Lawrence D'Oliveiro]

In message <13drijhfqlvlk96 at corp.supernews.com>, Steven D'Aprano wrote:

> Any cryptographer worth his salt (pun intended) would be looking to close
> that vulnerability BEFORE an attack is made public, and not just wait for
> the attack to trickle down from the NSA to the script kiddies.

Except that the NSA's reputation has taken a dent since they failed to
anticipate the attacks on MD5 and SHA-1.