Version-scoped input mixing and initialization credit lead to a generator; a nonblocking request branches on readiness.

Kernel entropy turns device noise into keys

Linux applications normally obtain cryptographic randomness from a kernel generator, rather than consuming one newly collected physical bit for every output bit. Initialization and state reuse still matter. A busy machine is not automatically safe, and a quiet machine is not automatically broken. Diagnose the interface, kernel version, and boot or cloning process before deciding that a counter proves a security failure. ...

October 22, 2027 · 5 min · XB Field Notes