>Or just install a small cheap cryptographically secure random number
>generator into the kernel, and access it though a cheap interface.

	do you have such code/algorithm?  any references?  if so, we can just
	put that into the kernel and let arc4random() pick randomness out of it
	via sysctl (it already does it now when /dev/urandom is not available).
	no change in userland required.

itojun