Recent upgrades that depend on the new Linux getrandom() syscall can cause OpenSSH to delay starting for tens of minutes while waiting for enough bytes of randomness. There are currently not any feasible work-arounds.
Systemd makes this behaviour worse, see issue #4271, #4513 and #10621.
Basically as of now the entropy file saved as /var/lib/systemd/random-seed will not - drumroll - add entropy to the random pool when played back during boot. Actually it will. It will just not be accounted for. So Linux doesn't know. And continues blocking getrandom(). This is obviously different from SysVinit times when /var/lib/urandom/random-seed (that you still have laying around on updated systems) made sure the system carried enough entropy over reboot to continue working right after enough of the system was booted.#4167 is a re-opened discussion about systemd eating randomness early at boot (hashmaps in PID 0...). Some Debian folks participate in the recent discussion and it is worth reading if you want to learn about the mess that booting a Linux system has become.
While we're talking systemd ... #10676 also means systems will use RDRAND in the future despite Ted Ts'o's warning on RDRAND [Archive.org mirror and mirrored locally as 130905_Ted_Tso_on_RDRAND.pdf, 205kB as Google+ will be discontinued in April 2019].
Related post: OneRNG: a Fully-Open Entropy Generator (2014)
(Score: 5, Informative) by zeigerpuppy on Saturday December 22 2018, @12:27AM
Another reason to use Devuan. i recently installed the latest version on a production server and have been really happy, it's quick, has good compatibility with extra packages (ZFS installed without hassle). The devs are doing a great job of keeping proper linux alive. I hope Debian continues to do well because ultimately downstream projects like Devuan rely on it but I won't be installing stock Debian ever again.
Oh, as far as hardware RNG, I've had great success with Bitbabbler White, here's a good comparison list. https://everipedia.org/wiki/lang_en/Comparison_of_hardware_random_number_generators/ [everipedia.org]
For those wondering if I've tried systemd, yep, and it's a clusterfuck, unexplained boot delays and failures, unpredictable behaviour and frequent security bugs, no thanks.