draft-rescorla-tls-extended-random says: "A cryptographically secure PRNG [RFC4086] SHOULD be used." RFC 4086 Section 6.2: "The correct technique is to start w

draft-rescorla-tls-extended-random says: "A cryptographically secure PRNG [RFC4086] SHOULD be used." RFC 4086 Section 6.2: "The correct technique is to start with a strong random seed, to take cryptographically strong steps from that seed [FERGUSON, SCHNEIER], and not to reveal the complete state of the generator in the sequence elements." In other words, you should not reveal the complete state of your PRNG regardless of how many values you disclose, and the authors explicitly warned against using a PRNG that does so (in practice every PRNG with finite state will cycle at some point, at which point all future values become predictable, but good designs have cycle lengths in the range of 2^(several thousand), so 1 TB of random data is no problem).