<i>800 Bps is going to take you years to work through a 4 TB hard drive</i><p>But you don&#x27;t need to do that. You simply take 256 bits and use them as an AES key. You then generate a stream of bits and write that to disk. Reading the disk afterward is equivalent to breaking AES. Or take Bernstein&#x27;s advice and use an even better stream cipher. <a href="https:&#x2F;&#x2F;cr.yp.to&#x2F;streamciphers&#x2F;why.html" rel="nofollow">https:&#x2F;&#x2F;cr.yp.to&#x2F;streamciphers&#x2F;why.html</a><p>And even if you re-key every 1 GB (just for grins), you&#x27;re still hardly using any random bits at all.<p>OTOH check out this comment elsewhere in this thread. <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=11560417" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=11560417</a><p>IDQuantique sells a product that purportedly generates millions of random bits per second. If I were gambling at a casino, I&#x27;d feel more comfortable with that than with randomness from an AES stream.<p>Yeah, I know I&#x27;m thinking irrationally. But I&#x27;m sure I&#x27;m not the only one.