> On 6 Oct 2025, at 20:41, Jacob Champion <jacob.champion@enterprisedb.com> wrote:
> Are there any use cases other than UUID that want CSPRNG guarantees
> without needing CSPRNG security?
None come to mind, and it seems increasingly likely that designing API which we
confidently can document how to use is too complicated. Maybe it's better to
re-focus on just the usecase in the UUID code and leave the API at pg_prng()
and pg_strong_random()? (We already have UUID code in contrib which in some
cases use arc4random after all.)
--
Daniel Gustafsson