RAND_pseudo_bytes is good enough for encryption IVs,