Crypto mode uses the browser's secure RNG. Seeded mode uses a deterministic PRNG for audited redraws.