yesodweb/wai — pull request #162 by larskuhtz (2013-06-03 19:35:36+00:00)
Title: Using RNG from cprng-aes in order to be more economic with OS entropy

This change introduces a new dependency, so I am not sure if it is acceptable.

The benefit is a more efficient usage of operating system entropy and less system calls (for reading from /dev/urandom on UNIX).

`Crypto.Random.API.SystemRandom` obtains all random bits directly from the operating system entropy pool. On UNIX this implies that a handle for `/dev/urandom` is kept open. `Crypto.Random.AESCtr.AESRNG` does so only for seeding the random number generator.