More documentation to come.
The implementation of the default random generator varies by platform. The implementation on each platform must be thread-safe and automatically seeded, and should be cryptographically secure to the extent possible. Currently supported platforms have the following implementation details:
arc4random_buf(3)
.getrandom(2)
when available; otherwise, they read from /dev/urandom
.getentropy(3)
.BCryptGenRandom
.