I got it from this part, unless I'm misreading: > Multiple callers, including sys_getrandom(..., flags=0), attempt to wait for the > RNG to become cryptograph

I got it from this part, unless I'm misreading: > Multiple callers, including sys_getrandom(..., flags=0), attempt to wait for the > RNG to become cryptographically safe before reading from it by checking for > crng_ready() and waiting if necessary. However, crng_ready() only checks for > `crng_init > 0`, and `crng_init==1` does not imply that the RNG is > cryptographically safe.