We have a variety of SecureRandom implementations:

    SHA1PRNG - based on a SHA1 MessageDigest
    NativePRNG - based on /dev/random,urandom
    Windows-PRNG - calls to Microsoft's MSCAPI
    PKCS11 - calls to underlying PKCS11 library

We might consider adding something more modern like:

    http://csrc.nist.gov/publications/nistpubs/800-90A/SP800-90A.pdf

We should also have a look over 90B/C which are in draft state to see if there is anything we can do at our level.

    http://csrc.nist.gov/publications/PubsDrafts.html#SP-800-90-B
    http://csrc.nist.gov/publications/PubsDrafts.html#SP-800-90-C