I tried looking for this in the javadocs and online but couldn't find a definitive answer. The answer by Dan Dyer in
How to solve performance problem with Java SecureRandom?
Seems to suggest SHA1PRNG does not use any system resources for entropy. Is this correct?
No, in the default Oracle implementation it uses system resources, unless you seed it before calling
nextBytes()
. From the Sun/Oracle documentation ofSecureRandom
: