> application developers may prefer to implement a DRBG using /dev/random as a conditioned seed No. Doing random in userland is just wrong. If your program has

> application developers may prefer to implement a DRBG using /dev/random as a conditioned seed No. Doing random in userland is just wrong. If your program has access to /dev/urandom, use it. If not, use arc4random(). > “Random Number Generators: Introduction for Operating System Developers” Or look how OpenBSD does it. (getentropy(), arc4random(), the subsystem) > The entropy pool used by /dev/urandom must be saved between reboots. OpenBSD does this, and more. The bootloader basically seeds the kernel with old entropy from before the reboot.