added secure RNG