Check RAND_bytes() return value or use RAND_pseudo_bytes().