Subject: Re: IRQF_SAMPLE_RANDOM question...

From: Jeff Garzik <[email-masked]>
Date: Mon, 06 Apr 2009 14:49:48 -0400

Stephen Hemminger wrote:
> The real problem one is xen-netfront. Because 1) it is least random,
> the attacker might be another VM 2) the VM is most in need of random
> samples because it doesn't have real hardware.

Agreed.

I'm surprised Xen doesn't use virtio-rng.  I guess it needs a special 
Xen paravirt driver for randomness.

	Jeff