&gt; BoringSSL just uses &#x2F;dev&#x2F;urandom directly.<p>Only if there&#x27;s no hardware RNG support which I admit can happen (it&#x27;s not perfect, I freely admit that).  I suspect that for Google&#x27;s use on their servers it&#x27;s a non-issue (assuming where they use it and need the high(er) speed stuff they&#x27;ll always have rdrand support).  If there is rdrand support then it will only reseed from &#x2F;dev&#x2F;urandom after every 1MB (or 1024 calls) of generated random data (per thread).