News for hackers. Stuff that matters.

A comment on Undocumented x86 instructions in Intel CPUs that can modify microcode. Parent comment

Re:Undocumented x86 instructions in Intel CPUs that can modi... by IncRnd on Saturday March 20, 2021 @01:27PM (#26524578)
How would an OS seed an RNG in the cloud? How would you seed an RNG on a headless server in a VM? What about when that VM is copied, possibly while running, in order to duplicate server functionality? There are vulnerabilities and threats here that your comment does not take into account.
[ Parent | on HN ]
Re:Undocumented x86 instructions in Intel CPUs that can modi... by trasz on Monday March 22, 2021 @08:10AM (#26539696)
You can use virtio_random.

But really, it's not about operating systems not using RDRAND at all - it's fine to use it as one of the entropy sources; what you don't want to do is use RDRAND directly instead of CPRNG.

[ Parent | on HN ]