These tokens, like the OneRNG, are quite interesting from an engineering point of view, but as a developer all you ever need to know or do about secure randomness is to use &#x2F;dev&#x2F;urandom and nothing else (unless it&#x27;s a wrapper for &#x2F;dev&#x2F;urandom).<p>Not &#x2F;dev&#x2F;random, not rand(), not something you found in a library. Just bytes, read from &#x2F;dev&#x2F;urandom.<p>Here is my CCC talk about why that is, which includes everything from kernel sources to authoritative quotes: <a href="https:&#x2F;&#x2F;media.ccc.de&#x2F;v&#x2F;32c3-7441-the_plain_simple_reality_of_entropy" rel="nofollow">https:&#x2F;&#x2F;media.ccc.de&#x2F;v&#x2F;32c3-7441-the_plain_simple_reality_of...</a><p>EDIT: the talk is in English, but you have to select it from the video UI, in the bottom right.