CSPRNGs require random seeds. They&#x27;re the obvious right thing when you can generate 256 (or whatever your security level is) bits that are truly unpredictable, independent, and of equal probability 0 and 1, but when generating significantly more is hard. If you can&#x27;t generate 256 truly unpredictable bits, the CSPRNG doesn&#x27;t help you much. And if you can generate an unbounded number of them, it&#x27;s not clear that there&#x27;s a downside to just using the TRNG data (but there&#x27;s certainly the argument that it&#x27;s better-studied and more robust to use a CSPRNG anyway).<p>Whether this particular method of random bit generation is in fact sound is a different question entirely (and worth asking of <i>all</i> ways to generate those seeds, including the Linux kernel&#x27;s entropy divination code).