Messages in this thread | | | Date | Mon, 11 Nov 2013 12:11:54 -0800 | Subject | Re: [tip:x86/kaslr] x86, kaslr: Provide randomness functions | From | Kees Cook <> |
| |
On Mon, Nov 11, 2013 at 12:07 PM, Ingo Molnar <mingo@kernel.org> wrote: > > * H. Peter Anvin <hpa@zytor.com> wrote: > >> Of course, perhaps we could just hash struct boot_params as a starting >> point? > > Yeah, that would be a good first step, before trying to parse DMI or ACPI. > Anything that is reasonably system dependent and gives at least some > amount of unpredicability.
Given the very limited nature of the early boot environment, what would you recommend for the hashing routine itself? There's nothing in boot/ that does any kind of "real" crypto hashing. Should I just XOR the entire contents of boot_params together?
-Kees
-- Kees Cook Chrome OS Security
| |