[Qemu-devel] Efficacy of jitterentropy RNG on qemu-kvm Guests

2018-08-02 Thread procmem
Hello. I'm a distro maintainer and was wondering about the efficacy of entropy daemons like haveged and jitterentropyd in qemu-kvm. One of the authors of haveged [0] pointed out if the hardware cycles counter is emulated and deterministic, and thus predictible. He therefore does not recommend using

Re: [Qemu-devel] Virtio-net drivers immune to Nethammer?

2018-06-01 Thread procmem
Michael S. Tsirkin: > On Fri, Jun 01, 2018 at 01:15:44PM +0000, procmem wrote: >> >> >> Stefan Hajnoczi: >>> On Mon, May 21, 2018 at 11:24:43PM +, procmem wrote: >>>> Hi I'm a privacy distro maintainer investigating the implications of the &

Re: [Qemu-devel] Virtio-net drivers immune to Nethammer?

2018-06-01 Thread procmem
Dr. David Alan Gilbert: > Isn't the idea to misuse CAT to detect something about access patterns; > so it's not about it actually being related? AFAICT, CAT is directly responsible since the way it interacts with the cache allows it to introduce predictable bit flips that can wreak all kinds of

Re: [Qemu-devel] Virtio-net drivers immune to Nethammer?

2018-06-01 Thread procmem
Stefan Hajnoczi: > On Mon, May 21, 2018 at 11:24:43PM +0000, procmem wrote: >> Hi I'm a privacy distro maintainer investigating the implications of the >> newly published nethammer attack [0] on KVM guests particularly the >> virtio-net drivers. The summary of the pape

[Qemu-devel] Virtio-net drivers immune to Nethammer?

2018-05-21 Thread procmem
Hi I'm a privacy distro maintainer investigating the implications of the newly published nethammer attack [0] on KVM guests particularly the virtio-net drivers. The summary of the paper is that rowhammer can be remotely triggered by feeding susceptible* network driver crafted traffic. This attack