- Cheap to enter entropy: no inter-CPU synch except at boot. - Bounded latency for entering entropy: . don't block interrupts when handling the pool, . don't do crypto in interrupt handlers. - If waiting for entropy at boot, notify waiters immediately. - Allow disabling . entropy collection, . entropy deletion, . HWRNG testing. -