Though of course, this could be in a userland library too. Just reading entropy from HW (exposed by the kernel). But the kernel still needs access to random num

Though of course, this could be in a userland library too. Just reading entropy from HW (exposed by the kernel). But the kernel still needs access to random number it can control and trust.