Correct -- the RNG output does not reveal anything about its input, just like the output of a strong cipher does not reveal anything about its input. djb has a

Correct -- the RNG output does not reveal anything about its input, just like the output of a strong cipher does not reveal anything about its input. djb has a good article on the subject: https://blog.cr.yp.to/20170723-random.html https://blog.cr.yp.to/20170723-random.html I've implemented his "fast-key-erasure CSPRNG" in Go: https://github.com/lukechampine/frand https://github.com/lukechampine/frand