On Thu, 2011-02-17 at 12:37 +0200, Dor Laor wrote: > On 02/17/2011 12:09 PM, Vadim Rozenfeld wrote: > > On Thu, 2011-02-17 at 11:11 +0200, Avi Kivity wrote: > >> On 02/16/2011 09:54 PM, --[ UxBoD ]-- wrote: > >>> Hello all, > >>> > >>> I believe I am hitting a problem on one of our Windows 2003 KVM guests > >>> were I believe it is running out of Entropy and causing SSL issues. > >>> > >>> I see that there is a module called virtio-rng which I believe passes the > >>> HW entropy source through to the guest but does this work on Windows > >>> as-well ? > >>> > >> > >> AFAIK there is no Windows driver for virtio-rng. Seems like a good > >> idea. Vadim? > > virtio-rng driver for windows is not a big deal. IMO, the real problem > > will be to force Windows to use for CriptoApi. > > What's the implication of it? good or bad? iirc, Vista and higher use a new generation of cryptography API. CriptoApi can be integrated with smart cards sub-system. If we can make Windows virtio-rng driver to be attachable to smart cart devstack, I think we can solve the problem.
> Do you know what hyper-v is doing for it? > No idea. > >> > >>> If it doesn't any ideas on how I can increase the amount of entropy being > >>> generated on a headless system ? or even monitor entropy on a Windows > >>> system ? > >> > >> No idea. Maybe you could ask Windows to collect entropy from packet > >> timings. > >> > > > > > > -- > > To unsubscribe from this list: send the line "unsubscribe kvm" in > > the body of a message to [email protected] > > More majordomo info at http://vger.kernel.org/majordomo-info.html > -- To unsubscribe from this list: send the line "unsubscribe kvm" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html
