From 173822655c7c345aca84c0599ce22194e0346687 Mon Sep 17 00:00:00 2001
From: Daniel Micay <daniel.micay@grapheneos.org>
Date: Tue, 23 Sep 2025 19:56:42 -0400
Subject: [PATCH] switch to xxd for converting random bytes to hex

---
 tcp-fastopen-rotate-keys | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tcp-fastopen-rotate-keys b/tcp-fastopen-rotate-keys
index 9e15c34..910a700 100755
--- a/tcp-fastopen-rotate-keys
+++ b/tcp-fastopen-rotate-keys
@@ -7,7 +7,7 @@ umask 077
 if [[ -e /etc/tcp_fastopen_seed ]]; then
     rand=$(b3sum --keyed -l 16 --no-names </etc/tcp_fastopen_seed <(date -uI))
 else
-    rand=$(openssl rand -hex 16)
+    rand=$(xxd -l 16 -p /dev/random)
 fi
 
 new_key=${rand:0:8}-${rand:8:8}-${rand:16:8}-${rand:24:8}