Oh, it already happened. Case in point: it is possible to build cheap and fully auditable harware RNG, with bandwidth fully sufficient to replace /dev/random o

Oh, it already happened. Case in point: it is possible to build cheap and fully auditable harware RNG, with bandwidth fully sufficient to replace /dev/random on most servers. I have one. But apparently noone wants such a thing, or if they even consider it, they insist on adding unneeded "feel-good" complexity like whitening. But...somehow the sky has not fallen. Trying to understand why. Maybe it isn't really a problem?