topic Openssl RDRAND engine usage in Intel® Xeon® Processor and Server Products

Openssl RDRAND engine usage

Kavitha — Mon, 14 Jun 2021 12:20:35 GMT

Hi,

We plan to use RDRAND openssl engine to seed the kernel (/dev/random) to provide good entropy in Virtual Platform.

Please suggest how frequently this instruction can be executed and any recommendation of the bytes to be read?

David_G_Intel — Fri, 18 Jun 2021 07:31:36 GMT

Hello Kavitha

Thank you for posting on the Intel️® communities.

Please share more information about the current setup.

Regards,

David G

Intel Customer Support Technician

Kavitha — Fri, 18 Jun 2021 08:45:14 GMT

Hi David,

These are the processor we use

Intel Xeon Silver 4110 CPU @ 2.10GHz

Intel Xeon Gold 6126 CPU @ 2.60 GHz

Intel Xeon Gold 5118 CPU @ 2.30 GHz

We plan to install ESXi 6.7/7.0 on them and deploy VM of different configurations.

On the VM we intend to use RDRAND instruction as an entropy source as it is NIST complaint /secure to seed the /dev/random.

Thanks

Kavitha

David_G_Intel — Wed, 23 Jun 2021 00:52:53 GMT

Thank you for the update, the processors mentioned are server products. We moved the thread to the appropriate forum:

The correct team will get back to you with more information.

Regards,

David G

Intel Customer Support Technician

IntelSupport — Thu, 24 Jun 2021 07:32:17 GMT

Hello Kavitha,

Based on your support request, we recommend that you submit your questions to the Intel® Developer Zone.

Intel® Developer Zone - Contact Page

You can submit your ticket through the Online Service Center at https://www.intel.com/supporttickets for support.

For reference purposes, we are including the Intel® Digital Random Number Generator (DRNG) Software Implementation Guide

Regards,

Wanner G.

Intel Customer Support Technician