Update notes for submitted changes

* uses os.urandom instead of Crypto.Random for backward compatibility