Re: [libvirt] RFC: virtio-rng and /dev/urandom
On Monday 18 April 2016 02:46:19 H. Peter Anvin wrote:
Another thing that really needs to be addressed, but is a separate
issue: invalidating and reseeding the entropy pool after a snapshot
event.
definitely agreed
though just reseeding would be sufficient - the goal is to make the
output unpredictable and unique between multiple machines starting from
the same snapshot, feeding enough random data to make the entropy pool
unique again is sufficient to achieve that
--
Regards,
Hubert Kario
Senior Quality Engineer, QE BaseOS Security team
Web: www.cz.redhat.com
Red Hat Czech s.r.o., Purkyňova 99/71, 612 45, Brno, Czech Republic
Attachments:
- signature.asc (application/pgp-signature — 819 bytes)