&gt; Fortuna rejects entropy estimation, and tries to build a CSPRNG that is secure without needing estimates<p>What really annoys me is that a Fortuna-based CSPRNG was contributed to Linux eleven years ago this month, but died on the vine, IIRC because the Linux kernel team were so fond of the entropy-estimation approach.