Dale's reply does make sense. While it is true that: <random data> ^ <compromised random data> = <random data> If <compromised random data> has prior knowled

Dale's reply does make sense. While it is true that: <random data> ^ <compromised random data> = <random data> If <compromised random data> has prior knowledge about <random data>, it can emit bits to bias the result. I.e. if I know I'm going to be XORed with a 1, I can return a 1 to yield a 0. This is entirely possible in hardware. Especially with instruction decode look-ahead.