The blurb here about the entropy of rand should be removed, it doesn't really inform anything and is always true for any cryptographic function. Shitty randomness in means bad crypto out.