int Curl_nss_random(struct Curl_easy *data,
                    unsigned char *entropy,
                    size_t length)
{
  Curl_nss_seed(data);  /* Initiate the seed if not already done */

  if(SECSuccess != PK11_GenerateRandom(entropy, curlx_uztosi(length)))
    /* signal a failure */
    return -1;

  return 0;
}

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.