Post #2553656

To be sure, the above is oversimplifying the situation somewhat. For example, perhaps someone doesn't trust the quality of the buitin random data, and wants to mix it with data from another source. But then, what other source would that be, in practice, and is that actually how we want secure applications to work? There are more questions here.