Note that the relevant Intel docs (http://software.intel.com/en-us/articles/intel-digital-random-number-generator-drng-software-implementation-guide/ http://sof

Note that the relevant Intel docs (http://software.intel.com/en-us/articles/intel-digital-random-number-generator-drng-software-implementation-guide/ http://software.intel.com/en-us/articles/intel-digital-rando... ) state that the final CSRNG is AES in CTR mode, according to the spec detailed in http://csrc.nist.gov/publications/nistpubs/800-90A/SP800-90A.pdf http://csrc.nist.gov/publications/nistpubs/800-90A/SP800-90A... As far as I know, there's no known issues with this approach, unlike with the elliptic curve random number generator detailed in the same document, where the NSA is believed to have pre-selected the elliptic curve points.