diff --git a/openbsc/src/libmsc/db.c b/openbsc/src/libmsc/db.c
index 4061fc1..9f26590 100644
--- a/openbsc/src/libmsc/db.c
+++ b/openbsc/src/libmsc/db.c
@@ -1275,7 +1275,10 @@
 	uint32_t try;
 
 	for (;;) {
-		try = rand();
+		if (RAND_bytes((uint8_t *) &try, sizeof(try)) != 1) {
+			LOGP(DDB, LOGL_ERROR, "RAND_bytes failed\n");
+			return 1;
+		}
 		if (!try) /* 0 is an invalid token */
 			continue;
 		result = dbi_conn_queryf(conn,