Confusing the two is perilous.

https://blog.cryptographyengineering.com/2016/03/21/attack-o...