Random Number Generator

Thanks Aaron for this post, very helpful. Can you provide any insight into how random the source is for the AES::key function? Is it using something like /dev/random or some combination of other factors? Has there been any testing/validation around the randomness?

 

 

Strange questions I know, but I am using this function to generate OTPs and my security review team is asking me to check all the details and even generate a large sample of output from the function to check randomness!

 

 

 

Thanks in advance!

 

Evan