java.security.SecureRandom should be used for anything even remotely important.