Oops, I missed one thing:
On Tue, 28 May 2002, Cliff Woolley wrote: > 1) If --with-egd=<path> is specified, --without-devrandom is assumed > and the EGD socket is used as the source of entropy. > > 2) Otherwise, if --with-devrandom=<DEV> is specified with a particular > device, that device is used as the source of entropy. > > 3) Otherwise, if --with-devrandom (with no =<DEV>) is specified or > --with-devrandom is not specified at all, we search > /dev/random > /dev/arandom > /dev/urandom > in that order. > > 4) If the search in #3 fails, ...or if --without-devrandom was specified > we try looking for the truerand library. > > 5) If none of the above is usable, we have no source of entropy.