[cyphar]

WireGuard does use the right wrapper -- get_random_u32(). The issue is that the implementation will just use whatever the architecture-provided randomness source provides if it's available[1]. That's the real bug.

[1]: https://elixir.bootlin.com/linux/v5.3.6/source/drivers/char/...