From a practical point having sources of randomness&#x2F;entropy isn&#x27;t very useful. A CSPRNG will do a great job generating random numbers. It will create secure Tls connections and a ssh_key that&#x27;s never been seen before. However it&#x27;s Achilles heel is that it MUST be seeded with random numbers. That&#x27;s hard to do in a predictable state, such as a headless vm.<p>If the seeds no good it can&#x27;t establish a secure Tls connection to fetch random data (ala Ubuntu pollinate service).<p>The next thing to push crypto security forward is easy, efficient, and trustworthy ways to generate this seed.