To be fair, the failures in that article are from userspace CSPRNGs that got even that part wrong. Debian&#x27;s problem was commenting out the lines that seeded the RNG from &#x2F;dev&#x2F;urandom, and Android&#x27;s problem was developers that used the RNG unseeded. They trouble wasn&#x27;t re-seeding -- they weren&#x27;t seeding in the first place.<p>However, if we are going to decide as an industry that we need a userspace CSPRNG, it&#x27;s not <i>that</i> hard of a job to write a single, high-quality, cross-platform implementation of a seeded-once CSPRNG that introduces no vulnerabilities beyond the kernel CSPRNG.