use openssl rng