Removing the Linux /dev/random blocking pool
Not blocking under insufficient entropy does not suddenly make that entropy available. Punting entropy collection to userspace doesn&#x27;t magically allow for DoS-free random number generation --- it just transforms, silently, a condition of insufficient entropy into a subtle security vulnerability. It feels like a form of reality denial, a bit like overcommit. The more time goes by, the more I wish there were a unixlike built on robustness, determinacy, and strict resource accounting.