Thor Lancelot Simon <tls%panix.com@localhost> writes: > On Fri, Feb 24, 2012 at 12:08:32PM +0100, Manuel Bouyer wrote: >> On Thu, Feb 23, 2012 at 10:37:28PM -0500, David Howland wrote: >> > Running NetBSD 6.0_BETA Xen PV DomU under Debian Squeeze. >> > >> > I get this nonstop: >> > >> > cprng 359112d1: WARNING insufficient entropy at creation. >> > >> > Does a Xen machine have any way to generate entropy? >> >> Not a strong one. The only sources of entropy are xbd and xennet which are >> disabled by default (because they're probably not very good) but can >> be enabled with rndctl. > What's wrong with xbd? I think what might be wrong with xbd is that another domU could observe things that are correlated in time with the transactions on this domU, and thereby predict other domUs entropy values.
Attachment:
pgphJE1tkfglc.pgp
Description: PGP signature