Sorry I was unclear. I think we only had "misgivings" because the key we were generating had only relatively minor use in the product. Alas, I don't recall ex

Sorry I was unclear. I think we only had "misgivings" because the key we were generating had only relatively minor use in the product. Alas, I don't recall exactly what that was, and it's certainly possible, in retrospect, that we didn't care as much about the implications of using /dev/urandom as we should have. But that was pre-Snowden.