Thanks for your quick response. A brief xmlsec debugging session revealed that RAND_status() will call down to RAND_poll() if necessary. On my platform (Windows), RAND_poll() does a better job of collecting random data than the approach I'd been considering. I think that I'd be best served by just calling RAND_status() and giving up if it fails. If it can't seed, the system is probably in dire straits anyway.