feels a bit... not as safe? anyone who got physical access to my tag could dump the firmware super easily and get both those values (and then leave the tag as it was so it kept tracking). it'd be nicer if the algorithm could derive p(i) from p(0) or p(i-1) instead