For example this has passed NIST SP800-22 and SP800-90B [1].
As far as I can tell, cloudflares DIY lamps/pendulums are not NIST certified.
[1] https://www.idquantique.com/random-number-generation/product...
Like all the COVID-prevention theatre: sitting in restaurants and only masking when you visit the toilet. Hand-washing often whilst in unventilated areas with no masks. That's all "COVID theatre" IMO, as it fails to actually prevent the thing ostensibly being tackled.
My favourite one FWIW was wiping down the seat padding in the gym where nobody was masked - I mean who came up with that??
A creative hardware source of legit randomness is not the same as security theatre, and arguably has some useful educational aspect - it's certainly a talking point!
COVID aside, isn't wiping down gym equipment after use just good sanitary practice? I don't want to slide in on someone else's greasy residue.
Some would claim that CMVP, FIPS 140-3, Common Criteria stickers on a black box (HSM) is security theater.
They do, don't they? I think the Lavalamps, etc, are just _extra_ entropy. The more entropy you add (even if it's _not_ a certified or perfect random source) only improves the random number generator.
jk.
That makes them by definition worse than the OpenSSL version that leaked user keys on request. /s