Re: [Cfrg] how to guard against VM rollbacks

[Paul Hoffman <paul.hoffman at vpnc.org>]

At 6:06 PM +0800 1/11/07, Wei Dai wrote:
> I think as a writer of cryptographic software, instead of checking 
> whether your software is running inside a VM, the safe thing to do 
> would be to assume that it is, and take appropriate defensive 
> measures.

At 6:24 PM +0800 1/11/07, Wei Dai wrote:
> Hopefully OS vendors will cooperate with VM software writers to fix 
> this problem.

These two responses seem to be at opposition with each other.

I think it is quite safe to assume that even if OS vendors cooperate 
with VM software writers in the future, all or nearly all OSs today 
will have the problem of the randomness state being saved by VM 
snapshots.

--Paul Hoffman, Director
--VPN Consortium

_______________________________________________
Cfrg mailing list
Cfrg at ietf.org
https://www1.ietf.org/mailman/listinfo/cfrg