# Looking for CPRNG implementatoin [closed]

I'm looking for commonly used and proven CPRNG implementation in C. What to use? ChaCha20 like in Linux Kernel? Does anybody know other implementations? PS: I don't want to implement by itself because it requires high accuracy and later must be verified by security experts to make sure all works correctly. Also I plan to use it on embedded device which OS doesn't have random system calls

You will note a valid forward security attack on CryptGenRandom. It only requires $2^{32}$ work effort which is quite low and therefore serious. However that requires knowledge of the internal state. Whether an attacker can know the internal state of anything is a huge can of worms, and only you can decide if this is a likely scenario.