To be on the safe side, I would rather use choreographically secure random generator (`os.urandom` should do the trick).