On 06.07.2021 08:33, Sergiy Kibrik wrote:
> Pass 128 bytes of random seed via FDT, so that guests' CRNGs are better seeded
> early at boot. This is larger than ChaCha20 key size of 32, so each byte of
> CRNG state will be mixed 4 times using this seed. There does not seem to be
> advantage in larger seed though.
> 
> Depending on its configuration Linux can use the seed as device randomness
> or to just quickly initialize CRNG.
> In either case this will provide extra randomness to further harden CRNG.
> 
> Signed-off-by: Sergiy Kibrik <sergiy_kib...@epam.com>
> Reviewed-by: Julien Grall <jul...@xen.org>
Reviewed-by: Michal Orzel <michal.or...@arm.com>
> 
> ---
>       Changes in V3:
>               - Rebased on current master
> 
> ---


Reply via email to