[lectrick]

Since you'd be the most likely person to know here, what javascript VM's will give you known-secure PRNG's, and which won't?

I think that's a pretty important thing to clarify if you're creating/signing transactions via JS.

[bgfuller]

A deterministic K is used in many of these libraries, so randomness isn't needed at the time of signing transactions. window.crypto and the Node.js crypto library are often used for private key generation.