Summary

• Do use the system cryptographic pseudo-random number generator (CRNGs) when at all possible.

• Do make sure that any other cryptographic generators are seeded with at least 64 bits of entropy, preferably 128 bits.

• Do not use a noncryptographic pseudo-random number generator (noncrytographic PRNG).

• Consider using hardware random number generators (RNGs) in high-assurance situations.