Skip to content

RFC virtio-rng based entropy leak reporting

Michael S. Tsirkin virtio-comment virtio-dev 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 RFC Latest3 patches 36 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/3rng: move to a file of its owncontent.tex virtio-rng.tex+43 -420 replies
2/3rng: be specific about the virtqueuevirtio-rng.tex+5 -40 replies
3/3rng: leak detection supportvirtio-rng.tex+60 -133 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [virtio-comment] [PATCH RFC 0/3] virtio-rng based entropy leak reporting

Generally, entropy only grows. However, there are cases where it goes down - for example, consider generating a one time pad where someone managed to use a side channel to steal its contents. By combining the seemingly random pad with the stolen contents we have reversed the entropy.

This actually happens within VMs e.g. when time is reversed due to snapshoting. Existing approaches for VMs include Microsoft's VM GEN ID.

This draft proposes a feature in virtio rng for reporting such leaks.

Patches 1,2 refactor existing draft text. Patch 3 adds new functionality.

TODO:
document theory of operation
add conformance clauses

Michael S. Tsirkin (3):
rng: move to a file of its own
rng: be specific about the virtqueue
rng: leak detection support

 content.tex    |  43 +--------------------
 virtio-rng.tex | 102 +++++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 103 insertions(+), 42 deletions(-)
 create mode 100644 virtio-rng.tex
Signature · 18 lines
MST


This publicly archived list offers a means to provide input to the
OASIS Virtual I/O Device (VIRTIO) TC.

In order to verify user consent to the Feedback License terms and
to minimize spam in the list archive, subscription is required
before posting.

Subscribe: [email protected]
Unsubscribe: [email protected]
List help: [email protected]
List archive: https://lists.oasis-open.org/archives/virtio-comment/
Feedback License: https://www.oasis-open.org/who/ipr/feedback_license.pdf
List Guidelines: https://www.oasis-open.org/policies-guidelines/mailing-lists
Committee: https://www.oasis-open.org/committees/virtio/
Join OASIS: https://www.oasis-open.org/join/