> use /dev/urandom and nothing else Or the getrandom() syscall, once it has trickled into all mainstream distributions' libcs. Which is basically /dev/random,

> use /dev/urandom and nothing else Or the getrandom() syscall, once it has trickled into all mainstream distributions' libcs. Which is basically /dev/random, but without the need to open() and close() the device first and after you've consumed your entropy. http://man7.org/linux/man-pages/man2/getrandom.2.html http://man7.org/linux/man-pages/man2/getrandom.2.html