Quote from: deepceleron on April 18, 2013, 07:48:57 PM

Quote from: mollison on April 18, 2013, 06:34:26 PM

So, again, my question is, can someone who knows about the client code confirm that it's ultimately using /dev/urandom?

The ultimate source of random data for keys is OpenSSL's rand_lib.c. This is where the build options will cause the answer to diverge; when you build Bitcoin, the answer is ultimately dependent upon build config options such as OPENSSL_FIPS (use the FIPS140 engine) and platform.

One would need to investigate the gitian-reproducible Bitcoin builds to give an answer about the official binaries; I've read enough OpenSSL code for this answer that I'm not gonna do this...