[ryanatdistrust]

That is correct, you still have 2^32 permutations of possible values.

[marginalia_nu]

Given it's seeded with system time, depending on the resolution, that may in practice be as low as tens of thousands of possible values (as in time(2) )

[ryanatdistrust]

2^32 is still incredibly small for crypto and is inexcusable.

[nullc]

A fact which was unambiguously well known to the authors prior to the report: https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2022...