From: Julien Grall <julien@xen.org>
To: Sergiy Kibrik <Sergiy_Kibrik@epam.com>, xen-devel@lists.xenproject.org
Cc: Ian Jackson <ian.jackson@eu.citrix.com>, Wei Liu <wl@xen.org>
Subject: Re: [XEN PATCH v2] libxl/arm: provide guests with random seed
Date: Thu, 3 Jun 2021 14:08:20 +0100 [thread overview]
Message-ID: <78b26e15-a3ca-e218-9afa-9f443e234260@xen.org> (raw)
In-Reply-To: <20210527085233.69917-1-Sergiy_Kibrik@epam.com>
Hi,
On 27/05/2021 09:52, Sergiy Kibrik wrote:
> Pass 128 bytes of random seed via FDT, so that guests' CRNGs are better seeded
> early at boot. This is larger than ChaCha20 key size of 32, so each byte of
> CRNG state will be mixed 4 times using this seed. There does not seem to be
> advantage in larger seed though.
>
> Depending on its configuration Linux can use the seed as device randomness
> or to just quickly initialize CRNG.
> In either case this will provide extra randomness to further harden CRNG.
>
> CC: Julien Grall <julien@xen.org>
> Signed-off-by: Sergiy Kibrik <Sergiy_Kibrik@epam.com>
Reviewed-by: Julien Grall <jgrall@amazon.com>
Ian, Wei, can we get an ack for this patch?
Cheers,
--
Julien Grall
next prev parent reply other threads:[~2021-06-03 13:08 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-05-27 8:52 [XEN PATCH v2] libxl/arm: provide guests with random seed Sergiy Kibrik
2021-06-03 13:08 ` Julien Grall [this message]
2021-06-30 10:12 ` Julien Grall
2021-06-30 11:52 ` Sergiy Kibrik
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=78b26e15-a3ca-e218-9afa-9f443e234260@xen.org \
--to=julien@xen.org \
--cc=Sergiy_Kibrik@epam.com \
--cc=ian.jackson@eu.citrix.com \
--cc=wl@xen.org \
--cc=xen-devel@lists.xenproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.