I’d note, this is one of the reasons why I felt like blocking (or raising an exception) on os.urandom was the right solution— because it’s hard to get that behavior on Linux otherwise. However, if we instead kept the blocking (or exception) behavior, getting the old behavior back on Linux is trivial, since it would only require open(“/dev/urandom”).read(…).