Jul 17, 2019

I would think that if it utilized the hardware pass through (say for a particular hardware module) and was driving a concrete use-case (on some established installation base), it would probably be ok eventually, rather than requiring that vendor to maintain patches on top. If it's just being added so that others can use it and believe they're getting true random, as opposed to pseudo-random, when in fact they may be getting pseudo-random data, then no -- because that's somewhat dangerous.