I'm glad I resisted pressure from Intel to let /dev/random rely only on RDRAND (plus.google.com)