> Why not roll the dice on the full interval and check the product after the fact? See earlier point about the time-consuming nature of RSA key generation. Star

> Why not roll the dice on the full interval and check the product after the fact? See earlier point about the time-consuming nature of RSA key generation. Starting over from scratch is expensive. They lose a bit of entropy by pre-setting the leading bit to 1. There have been discussions about this in the past - https://news.ycombinator.com/item?id=19374758 https://news.ycombinator.com/item?id=19374758