WireGuard does use the right wrapper -- get_random_u32(). The issue is that the implementation will just use whatever the architecture-provided randomness sourc

WireGuard does use the right wrapper -- get_random_u32(). The issue is that the implementation will just use whatever the architecture-provided randomness source provides if it's available[1]. That's the real bug. [1]: https://elixir.bootlin.com/linux/v5.3.6/source/drivers/char/random.c#L2343 https://elixir.bootlin.com/linux/v5.3.6/source/drivers/char/...