Isolate and document RNGs within the reference implementations

[cryptoquick]

From the C code, we should investigate anything that introduces or relates to system entropy.

Obviously if a PRNG is needed for purposes specific to the signature algorithm, it should remain, but it's worth it to try looking at things in case they introduce some non-determinism.