Generating simple ones then encrypt & MAC them with password-derived key seems simpler. There's standard constructions for each step, too.