Re:Fixing Getrandom()
by tptacek on Tuesday October 01, 2019 @05:07PM
(#21130660)
I don't understand why you believe an adversarial CPU must be deterministic simply because it says it will be.
[ Parent
| on HN ]
Re:Fixing Getrandom()
by cryptonector on Tuesday October 01, 2019 @05:58PM
(#21131180)
I don't understand why you got downvoted. Even if GP meant that a CPU that is advertised as formally verified must be deterministic... the devil is in the details, and any number of bugs and undocumented features, including vulnerabilities and backdoors, can hide in a formally verified CPU that has billions of transistors.
Re:Fixing Getrandom()
by tedunangst on Tuesday October 01, 2019 @07:23PM
(#21131976)
Even if it seems deterministic now, there's no guarantee it won't become non deterministic in the future. https://ieeexplore.ieee.org/document/7546493
This is a very valid point, and there is even anecdotal evidence that operations we expect to be deterministic may not always be so.[1] Just because ADD works as documented in most scenarios doesn't mean we can verify that it will always work as documented in every scenario.
[1]: https://techreport.com/review/17732/intel-graphics-drivers-e...