I appreciate the cool factor of a dedicated hardware RNG, but provided you've seeded a CSPRNG with a relatively small number of true random bits, there's no att

I appreciate the cool factor of a dedicated hardware RNG, but provided you've seeded a CSPRNG with a relatively small number of true random bits, there's no attacks on that that aren't "assuming a total preimage attack against SHA-1...". I guess I'm saying after ~128 bits you can safely disconnect the TRNG.