if you have a cryptographically secure random function, just use that. no need to hash it!