Oh boy, I should have seen this one coming :-) By "this mess" I meant the LibreSSL fork/chroot mess. I think crypto libraries should just use whatever the OS

Oh boy, I should have seen this one coming :-) By "this mess" I meant the LibreSSL fork/chroot mess. I think crypto libraries should just use whatever the OS provides and not try to implement their own CSPRNGs. But git-crypt is a cross-platform application, not a crypto library. Implementing my own cross-platform wrapper around OS CSPRNGs would be decidedly less sane (and more error-prone) than just using the crypto library's CSPRNG, even if I disagree with how the library has done things.