4 ms·

He is saying that using a malicious source of entropy that can read the current state of the pool (such as RDRAND) can harm security.

• tptacek 7y ago
  This is an extremely weird threat model, in that it implies an actively adversarial CPU that can't be trusted with or without RDRAND.
• tzs 7y ago
  If you only have one source that you suspect might be malicious (such as RDRAND), can't you just use that as the first source?