introduce csprng.c instead of having to pull util.c from everywhere