Re: Standardizing an MSR or other hypercall to get an RNG seed?
From: Christopher Covington <hidden>
Date: 2014-09-19 18:30:51
Also in:
kvm
On 09/17/2014 10:50 PM, Andy Lutomirski wrote:
Hi all- I would like to standardize on a very simple protocol by which a guest OS can obtain an RNG seed early in boot. The main design requirements are: - The interface should be very easy to use. Linux, at least, will want to use it extremely early in boot as part of kernel ASLR. This means that PCI and ACPI will not work.
How do non-virtual systems get entropy this early? RDRAND/Padlock? Truerand? Could hypervisors and simulators simply make sure these work? Christopher -- Employee of Qualcomm Innovation Center, Inc. Qualcomm Innovation Center, Inc. is a member of Code Aurora Forum, hosted by the Linux Foundation.