I stumbled across a possible answer to this question just now in a discussion regarding a proposed interface for a randomness call where the callee would declar

I stumbled across a possible answer to this question just now in a discussion regarding a proposed interface for a randomness call where the callee would declare what they are using the randomness for - with Monte Carlo as one of the options. I immediately recalled your comment, so, here is your answer: > I would hope that people would agree there should be a difference between what is needed for a Monte Carlo simulation and other various cryptographic use cases. (I've gotten bug reports from people who insisted on using /dev/urandom for Monte Carlo simulations, and who then complained when it was too slow for their purposes....) https://www.ietf.org/mail-archive/web/dsfjdssdfsd/current/msg00125.html https://www.ietf.org/mail-archive/web/dsfjdssdfsd/current/ms...