Comment by ris
7 years ago
> 128-bits of random data is sufficient to securely generate a stream of 100s of terabytes of random data.
What you are describing is /dev/urandom. Your argument is basically "urandom is good enough for anybody". If you want to use that, use it.
/dev/urandom is not always sufficiently seeded.
/dev/random makes sure that it's seeded, then pretends it can run out somehow.
getrandom() with default settings is the right behavior almost always, and it took ages to get implemented.