Switch over calls which hit the OS entropy source to F.blocking

[yilinwei]

No description provided.

[yilinwei]

For native, https://www.openssl.org/docs/man3.0/man3/EVP_RAND_fetch.html is the call which reads /udev/random.

[armanbilge]

Linking to discussion about SecureRandom in typelevel/cats-effect#2882 (comment).

It would be good to avoid blocking if possible since it adds considerable overhead.

For Native, getrandom is promising. With the GRND_NONBLOCK flag it will actually return immediately with an error if it would block. So we could do something like F.delay(...) and retry with F.blocking(...) only if necessary.

https://man7.org/linux/man-pages/man2/getrandom.2.html

[yilinwei]

Note, for native it reads something tiny like 32-bits to seed. Especially if we pool it and share our RAND across all the instances. You'd have a single top level F.blocking. I need to look into Node and the JVM.