Problems emerge for a unified /dev/*random
Problems emerge for a unified /dev/*random
Posted Mar 30, 2022 12:39 UTC (Wed) by ncm (guest, #165)In reply to: Problems emerge for a unified /dev/*random by jepler
Parent article: Problems emerge for a unified /dev/*random
Such devices might be more trustworthy than the "hardware RNG" instructions provided on processor cores, which we have seen demonstrated (in a recent AMD erratum) may be reliably turned off from microcode, and, we may presume, from an appropriate not-publicly-documented instruction sequence. Whether to try to defend against such an attack depends on your threat model, of course; if so, an unreliable source of random numbers might be the least of your problems. But defense in depth has rarely been a mistake.
