Given that macOS uses Yarrow as a PRNG, and Yarrow is only capable of 160 bit outputs (/dev/random on macOS is actually Yarrow) are keys generated on macOS weaker than Linux?
Even BSD has switched to Fortuna.
Is this is big gaping hole in Modern macOS security?
I have looked through the source and it seems as if they switched to a DRBG NIST generator?
There are very few references to Yarrow in the 10.14 XNU code compared with older versions of the Kernel, but 10.14 still contains this string in key.c :
/* Our PRNG is based on Yarrow and doesn't need to be seeded */ That said if you looked at older XNU Yarrow is littered everywhere.
Source code for XNU:
So, are Apple still using Yarrow?