I didn&#x27;t RTFA, but I&#x27;m wondering why Fortuna[1] hasn&#x27;t seen better adoption or excitement. I think the BSD team made the right approach of making &#x2F;dev&#x2F;random|urandom both a CSPRNG, which if seeded and mixed is an unlimited source of high quality entropy.<p>Fortuna also has the benefit of mitigating damage from a compromised generator. If the generator is compromised it&#x27;s very difficult to rewind the RNG output and perform a history attack (is that even the right word for such a thing?).<p>[1] <a href="https:&#x2F;&#x2F;www.schneier.com&#x2F;cryptography&#x2F;fortuna&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.schneier.com&#x2F;cryptography&#x2F;fortuna&#x2F;</a>