I am not a cryptographer, but my impression is that the points at which /dev/random stops are not well-justified. It doesn't directly pass out entropy, but inst

I am not a cryptographer, but my impression is that the points at which /dev/random stops are not well-justified. It doesn't directly pass out entropy, but instead feeds it through a cryptographically-secure PRNG first, making it a rather arbitrary line that's drawn to decide when entropy is 'exhausted'. There was a brief HN discussion on the topic when FreeBSD made their change: https://news.ycombinator.com/item?id=8550457 https://news.ycombinator.com/item?id=8550457