well, it's slower than random

“recovers every reported private key at statistically indistinguishable rates from the IBM hardware runs.”