depends crypt-random
