The Android SecureRandom incident When the patch for Android’s SecureRandom was released last week, I was a little surprised. In addition to fixing the Apache Harmony implementation of SecureRandom, the patch also contained Applies the fix for OpenSSL PRNG having low entropy. Does nothing if the fix is not needed. What was that all about? I understood that the problem with the Harmony implementati