A system and method for generating a random, unpredictable cryptographic security key by the use of a memory device, such as a flash RAM memory chip, internal to a computing device. The system and method of the present invention allows for the generation of a cryptographic security key without the need for additional hardware that is specifically configured to generate key codes. One embodiment of the invention involves a method comprising the steps of executing a function on a flash memory device; timing the completion of the function executed on the flash memory device, thereby generating a time value; and deriving the key code from the generated time value.