Hey Dominik, I just noticed that we use RDSEED in crng_reseed(). I would think we could remove that and stick to having RDSEED used in extract entropy as you suggested. I'm now pretty sure the older decision boiled down to the 10 bytes vs 5 minutes thing, as discussed before. So please feel free to send a patch doing just this. Jason
