Re:Undocumented x86 instructions in Intel CPUs that can modi...
by trasz on Saturday March 20, 2021 @05:31AM
(#26521840)
That’s one of the reasons why operating systems provide a proper CPRNG instead of trusting RDRAND.
[ Parent
| on HN ]
Re:Undocumented x86 instructions in Intel CPUs that can modi...
by IncRnd on Saturday March 20, 2021 @01:27PM
(#26524578)
How would an OS seed an RNG in the cloud? How would you seed an RNG on a headless server in a VM? What about when that VM is copied, possibly while running, in order to duplicate server functionality? There are vulnerabilities and threats here that your comment does not take into account.
Re:Undocumented x86 instructions in Intel CPUs that can modi...
by trasz on Monday March 22, 2021 @08:10AM
(#26539696)
You can use virtio_random.
But really, it's not about operating systems not using RDRAND at all - it's fine to use it as one of the entropy sources; what you don't want to do is use RDRAND directly instead of CPRNG.