I'm a little confused about TNRGs and CSPRNG, regarding this question crypto.stackexchange.com/questions/38053/… it says that TNRGs are rarely uniform, so why not use them as a CSPRNG rather than a seed for a CSPRNG?
You're nearly encrypting "nothing" with the key and nonce, to create a stream of waffle, that will be arithmetically combined with the plaintext to for cipher text
what types of constructions are used? compression functions maybe?
Usually (e.g. in ChaCha / Salsa type ciphers) keystreams are generated by combining the key with a nonce and a stream-counter (for multiple fixed width "blocks") in such a way that not knowing the key the output looks random even when the nonce and counter are known.
technically PRFs in counter-mode is what is being done
(at least for chacha / salsa I don't know about others)
(and you can use block ciphers as PRFs for up to 2^(n/2) blocks for n-bit block size)