Real random numbers, <a href="https:&#x2F;&#x2F;github.com&#x2F;jackfoxy&#x2F;RandomBitsSolution" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;jackfoxy&#x2F;RandomBitsSolution</a> The wrapping code can be short and sweet and run in a repl on an audited machine... or go back to Ping-Pong balls as suggested by others.<p>The point being just about any software supplied be a vendor is going to be non-trivial and in some way exploitable.