Re: [virtio-dev] Re: [PATCH RFC 0/3] virtio-rng based entropy leak reporting

[Babis Chalios <bchalios@amazon.es>]

Hi Michael,

On 12/1/23 08:02, Michael S. Tsirkin wrote:
> CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you can confirm the sender and know the content is safe.
>
>
>
> On Mon, Nov 21, 2022 at 11:30:19AM -0500, Michael S. Tsirkin wrote:
>> Generally, entropy only grows. However, there are cases where
>> it goes down - for example, consider generating a one time
>> pad where someone managed to use a side channel to
>> steal its contents. By combining the seemingly random
>> pad with the stolen contents we have reversed the entropy.
>>
>> This actually happens within VMs e.g. when time is reversed due
>> to snapshoting. Existing approaches for VMs include Microsoft's
>> VM GEN ID.
>>
>> This draft proposes a feature in virtio rng for reporting such
>> leaks.
>>
>> Patches 1,2 refactor existing draft text. Patch 3 adds new functionality.
>>
>> TODO:
>>        document theory of operation
>>        add conformance clauses
> Guys any input on this? Anyone going to use this?

I plan to post an RFC patch for linux virtio-rng show-casing this with 
Firecracker, this week.
Also, I had sent an e-mail: 
https://www.mail-archive.com/virtio-dev@lists.oasis-open.org/msg09128.html 
with some questions,
not sure whether you missed it?

>> Michael S. Tsirkin (3):
>>    rng: move to a file of its own
>>    rng: be specific about the virtqueue
>>    rng: leak detection support
>>
>>   content.tex    |  43 +--------------------
>>   virtio-rng.tex | 102 +++++++++++++++++++++++++++++++++++++++++++++++++
>>   2 files changed, 103 insertions(+), 42 deletions(-)
>>   create mode 100644 virtio-rng.tex
>>
>> --
>> MST
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: virtio-dev-unsubscribe@lists.oasis-open.org
> For additional commands, e-mail: virtio-dev-help@lists.oasis-open.org
>

Cheers,
Babis


Amazon Spain Services sociedad limitada unipersonal, Calle Ramirez de Prado 5, 28045 Madrid. Registro Mercantil de Madrid . Tomo 22458 . Folio 102 . Hoja M-401234 . CIF B84570936