There is a definite need for data with entropy not based on algorithms. As to whether we need *true* random numbers, that's a subject for debate. Typically we get data that's as good as we need it to be from a hardware generator by running the initial data (which may have some kind of pattern or bias) through an algorithm which sort of mixes it. But it is very useful to have this entropy come from a hardware device, because it affords an extra level of security; pseudorandom numbers can be compromised if the algorithm is known and the seed is discovered, but there is no such equivalent for random numbers generated by a hardware device.

- Moses Liskov (faq-editor@rsa.com) http://www.rsa.com/