From mboxrd@z Thu Jan 1 00:00:00 1970 From: "H. Peter Anvin" Subject: Re: random: Providing a seed value to VM guests Date: Thu, 01 May 2014 14:01:12 -0700 Message-ID: <5362B618.50602@zytor.com> References: <20140501192618.GA25829@thunk.org> <900441a0-24e8-4976-ad35-3971805b9f34@email.android.com> <20140501203910.GB25829@thunk.org> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit To: Andy Lutomirski , "Theodore Ts'o" , "linux-kernel@vger.kernel.org" , kvm list , Florian Weimer , Kees Cook Return-path: In-Reply-To: Sender: linux-kernel-owner@vger.kernel.org List-Id: kvm.vger.kernel.org On 05/01/2014 01:56 PM, Andy Lutomirski wrote: > > Even if we could emulate RDSEED effectively**, I don't really > understand what the guest is expected to do with it. And I generally > dislike defining an interface with no known sensible users, because it > means that there's a good chance that the interface won't end up > working. > > ** Doing this sensibly in the host will be awkward. Is the host > supposed to use non-blocking reads of /dev/random? Getting anything > remotely fair may be difficult. The host can use nonblocking reads of /dev/random. Fairness would have to be implemented at the host level, but that is true for anything. -hpa