title: Can you make a non-cryptographically secure random number generator secure?
body: <p>This is more of a fundamental question, but the context is specifically in terms of JavaScript. Given that <code>Math.random</code> is not cryptographically secure, can the results still be considered secure when it has been called a certain number of times that cannot be predicted?</p>
  
  <p>So if I was to generate a 32bit number using <code>window.crypto.getRandomValues</code> for example and select one of the digits as an iteration count – calling <code>Math.random</code> that number of times and using the last result, is the result still predictable? </p>
  
  <p>The purpose of this is to generate a set of secure random numbers between 0 and 1 (exclusive) without having the ability to manually seed <code>Math.random</code>.</p>
  
  <p>My initial thoughts are that the result shouldn't be predictable – but I want to make sure I'm not overlooking something crucial.</p>