&gt;  Instead, using AES-128 CTR_DRBG<p>Just for comparison this is what Windows does[1] for it&#x27;s PRNG stuff (in Vista SP1 and newer at least).  It uses AES256 in CTR mode as a DRNG[2].<p>[1] <a href="https:&#x2F;&#x2F;msdn.microsoft.com&#x2F;en-us&#x2F;library&#x2F;windows&#x2F;desktop&#x2F;aa379942(v=vs.85).aspx" rel="nofollow">https:&#x2F;&#x2F;msdn.microsoft.com&#x2F;en-us&#x2F;library&#x2F;windows&#x2F;desktop&#x2F;aa3...</a><p>[2] NIST 800-90