This looks to be the same technique as Dan Kaminsky&#x27;s DakaRand, including the debiasing: <a href="https:&#x2F;&#x2F;dankaminsky.com&#x2F;2012&#x2F;08&#x2F;15&#x2F;dakarand&#x2F;" rel="nofollow">https:&#x2F;&#x2F;dankaminsky.com&#x2F;2012&#x2F;08&#x2F;15&#x2F;dakarand&#x2F;</a><p>See also Kaminsky&#x27;s implementation of the same approach in pure JS: <a href="https:&#x2F;&#x2F;gist.github.com&#x2F;PaulCapestany&#x2F;6148566" rel="nofollow">https:&#x2F;&#x2F;gist.github.com&#x2F;PaulCapestany&#x2F;6148566</a><p>and Ryan Finnie&#x27;s implementation in Perl: <a href="http:&#x2F;&#x2F;www.finnie.org&#x2F;2012&#x2F;08&#x2F;14&#x2F;twuewand-2-0-released&#x2F;" rel="nofollow">http:&#x2F;&#x2F;www.finnie.org&#x2F;2012&#x2F;08&#x2F;14&#x2F;twuewand-2-0-released&#x2F;</a><p>The big concern I have is how reliable this is on virtual machines. Just about all physical machines I&#x27;d want to use have high-quality, trustworthy-within-my-threat-model (i.e., &quot;if the NSA wanted to attack my silicon, there&#x27;s easier silicon for them to attack&quot;) hardware random number generators, and all physical machines I&#x27;d want to use pick up sufficient randomness from the kernel&#x27;s entropy magic thing. But virtual machines often don&#x27;t have access to the hardware RNG, and they don&#x27;t have access to enough other hardware to populate entropy. It seems like this technique would be particularly risky there ... although I don&#x27;t think anyone&#x27;s published an attack on DakaRand yet, so maybe it&#x27;s fine!