Messages in this thread | | | From | Christian Borntraeger <> | Subject | Re: [PATCH 2/2] lguest: virtio-rng support | Date | Sat, 17 May 2008 09:43:53 +0200 |
| |
Am Samstag, 17. Mai 2008 schrieb Herbert Xu: > On Sat, May 17, 2008 at 04:28:03PM +1000, Rusty Russell wrote: > > > > But you did not address the DoS question: can we ignore it? Or are we trading > > off a DoS in the host against a potential security weakness in the guest? > > Why not do both? Use the host's urandom to make the guest at least > unpredictable on start-up without increasing the guest's entropy, > and use the host's random to actually increase the guest's entropy.
I think the proper solution would be to use the hosts /dev/hw_rng - if available.
| |