Randomness 101: LavaRand in Production

This post introduces LavaRand, a novel system that uses lava lamps as a secondary source of cryptographic randomness for Cloudflare's production servers. It explains the critical need for unpredictable randomness in cryptography, the challenges computers face in generating it, and how CSPRNGs combined with real-world unpredictable inputs (like the chaotic flow of lava lamps captured by a camera) can provide a robust solution. LavaRand serves as a 'hedge' to ensure security even if primary randomness sources are compromised, highlighting Cloudflare's proactive and layered approach to security.