Re: [Xen-devel] PV random device

2015-10-06 Thread Ian Campbell
On Mon, 2015-10-05 at 18:33 -0700, Sarah Newman wrote: > Greetings, > > We would like to use something like virtio-rng > http://wiki.qemu-project.org/Features-Done/VirtIORNG with PVM domUs and > since the wiki page on virtio > http://wiki.xen.org/wiki/Virtio_On_Xen says the wiki page is out of da

Re: [Xen-devel] PV random device

2015-10-06 Thread Sarah Newman
On 10/05/2015 10:18 PM, Andy Smith wrote: > But again as I say, that article I posted earlier contains a bunch > of smart crypto people saying that all of this is unnecessary. So > should we be enabling it? Even if only urandom is considered necessary, how is the initial seed for urandom being g

Re: [Xen-devel] PV random device

2015-10-05 Thread Andy Smith
Hi Steven On Tue, Oct 06, 2015 at 03:50:10PM +1100, Steven Haigh wrote: > On 2015-10-06 15:29, Andy Smith wrote: > >- Your typical EntropyKey or OneRNG can generate quite a bit of > > entropy. Maybe 32 kilobytes per second for ~$50 each. > > If you can get one... :) Yeah, EntropyKeys aren't rea

Re: [Xen-devel] PV random device

2015-10-05 Thread Steven Haigh
On 2015-10-06 15:29, Andy Smith wrote: - Your typical EntropyKey or OneRNG can generate quite a bit of entropy. Maybe 32 kilobytes per second for ~$50 each. If you can get one... :) - You can access them over the network so no USB passthrough needed. Care to give details on this? I've got

Re: [Xen-devel] PV random device

2015-10-05 Thread Sarah Newman
On 10/05/2015 09:29 PM, Andy Smith wrote: > I don't find it a problem as: > > - Your typical EntropyKey or OneRNG can generate quite a bit of > entropy. Maybe 32 kilobytes per second for ~$50 each. > > - You can access them over the network so no USB passthrough needed. Yes, I'm implementing

Re: [Xen-devel] PV random device

2015-10-05 Thread Andy Smith
Hi Sarah, On Mon, Oct 05, 2015 at 09:12:47PM -0700, Sarah Newman wrote: > On 10/05/2015 08:35 PM, Andy Smith wrote: > > So, I've been keeping (PV) domUs topped up with entropy by giving > > them access to hardware RNGs (initially Entropy Keys, but since the > > company making them failed I've swit

Re: [Xen-devel] PV random device

2015-10-05 Thread Sarah Newman
On 10/05/2015 08:35 PM, Andy Smith wrote: > So, I've been keeping (PV) domUs topped up with entropy by giving > them access to hardware RNGs (initially Entropy Keys, but since the > company making them failed I've switched to OneRNGs). This is not a satisfactory solution for us because even if we

Re: [Xen-devel] PV random device

2015-10-05 Thread Andy Smith
Hi, On Mon, Oct 05, 2015 at 06:33:49PM -0700, Sarah Newman wrote: > We would like to use something like virtio-rng > http://wiki.qemu-project.org/Features-Done/VirtIORNG with PVM domUs and since > the wiki page on virtio > http://wiki.xen.org/wiki/Virtio_On_Xen says the wiki page is out of date,

[Xen-devel] PV random device

2015-10-05 Thread Sarah Newman
Greetings, We would like to use something like virtio-rng http://wiki.qemu-project.org/Features-Done/VirtIORNG with PVM domUs and since the wiki page on virtio http://wiki.xen.org/wiki/Virtio_On_Xen says the wiki page is out of date, what is the current status? Would a native xen driver be lik