Cryptographically Secure Pseudorandom Number Generator
A CSPRNG is a pseudorandom generator whose output is computationally indistinguishable from true randomness, even to an attacker who sees some of it. Operating systems expose one through interfaces like /dev/urandom and getrandom, seeded from hardware entropy. Every key, session token, and nonce in a secure system should come from a CSPRNG.