> [...], I get:
[...]
>        3. cryptographically strong generator for cases where you need
>           it, such as CBC IVs.

Why do you need a cryptographically strong generator for IVs?  They're
sent in the clear anyway.

(This is a serious question, not a criticism, at least not unless the
answer is "uhhh...you don't". :-)  I can't see any reason, but I'm not
*nearly* cryptographer enough to be confident there isn't any.)

/~\ The ASCII				der Mouse
\ / Ribbon Campaign
 X  Against HTML	       mouse@rodents.montreal.qc.ca
/ \ Email!	     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B