On Mon, Apr 10, 2017 at 8:23 AM, Johannes Graumann <[email protected]> wrote: > I am wondering whether > 1) under QubesOS a (USB) HW RNG like http://www.bitbabbler.org/ is usable
Yes. You would need to do some work to make it feed entropy in a safe way though. > and if yes > 2) where attaching it would make most sense? sys-net? dom0? sys-usb, and have a qrexec service in dom0 to collect entropy from it and mix in into the dom0 pool, which will eventually propagate to other VMs. > Can Xen VM's be set up to feed on entropy provided by the host? Yes, in fact we already do so. Discussion: - https://github.com/QubesOS/qubes-issues/issues/673 - https://groups.google.com/d/topic/qubes-devel/5wI8ygbaohk/discussion Implementation: - https://github.com/QubesOS/qubes-core-agent-linux/blob/a69acdabbfb60d88971644cfad50165091a66b9f/init/functions#L95-L101 - https://github.com/QubesOS/qubes-core-admin/blob/19e68bacf22cd965e819dfa4913740ecc14d1c40/core-modules/000QubesVm.py#L1152-L1158 Cheers, Jean-Philippe -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CABQWM_B5JAjF4%3DS8m%2BK-JexUVjpvqnqKyJounU4LkxRvhqbvCg%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
