> it looks like it's just using Keccak as a stream cipher of sorts (but seeding it from /dev/urandom). That's pretty ok, and if we don't trust stream ciphers to produce pseudorandom numbers we have much bigger issues.

I very strongly disagree with userspace RNGs being used instead of the kernel's CSPRNG being "pretty ok".

Don't "seed a userspace RNG from urandom". Just use urandom.