use random instead of urandom