Indeed, the link you gave pretty much nails my exact issue with it: > FreeBSD’s kernel crypto RNG doesn’t block regardless of whether you use /dev/random or ur

Indeed, the link you gave pretty much nails my exact issue with it: > FreeBSD’s kernel crypto RNG doesn’t block regardless of whether you use /dev/random or urandom. Unless it hasn’t been seeded, in which case both block. This behavior, unlike Linux’s, makes sense. Linux should adopt it. The system call is arguably better, sure, but it should also be quite possible to fix /dev/urandom to just block when unseeded so we can finally put this issue to rest.