Jul 17, 2019

I generally agree, but I'm not sure PRNG has the option for hardware random number generation, since at least on systems like GNU/Linux, it sources from a pseudo-random pool (/dev/urandom). libsodium claims it has the hardware true random capability if it's available. Either way, I think point 3 is the most important in some sense, as if we provide something that people believe is true random when in fact, that can't be provided in a general configuration, it's a maintenance/support/security burden taken on for no concrete benefit.