Questions about the Intel Digital Random Number Generator (processor support and ESV certs)

[MWC]

Hi,

In the past I have collected entropy from the Intel Digital Random Number Generator (DRNG) implemented on the Broadwell family of processors via the RDSEED instruction. I used the Intel documentation located here for guidance:

https://www.intel.com/content/www/us/en/developer/articles/guide/intel-digital-random-number-generator-drng-software-implementation-guide.html

I just wanted to find out if the same hardware DRNG is used on the XEON gen 2 processors. I know that the RDSEED instruction is still available, but I don't know if the same hardware design is used to implement the DRNG.

Also, is the DRNG accessed by the RDSEED instruction the same design as the DRNG4.2_Gen3 hardware certified by NIST here?

https://csrc.nist.gov/projects/cryptographic-module-validation-program/entropy-validations/certificate/57

Thanks in advance

[NormanS_Intel]

Hello MWC,

Thank you for posting in the community!

To ensure you receive the most specialized assistance, we have a dedicated forum that addresses these specific concerns. Therefore, I will be moving this discussion to our Server Forum. This will allow our knowledgeable community and experts to provide you with timely and accurate solutions.

Best regards,

Norman S.

Intel Customer Support Engineer

[IntelSupport]

Hello MWC,

Greetings!

To assist you further, kindly provide the following details:

1.Complete system information

2.Specific model of the 2nd Gen Xeon processor

Regards,

Vikas

Intel Customer Support Technician

intel.com/vroc

[MWC]

Hi Vikas

Thank you for your response.

Here are my system details:

1. Server: HPE DL380-12 G10, H/D: 4TB, RAM: 512GB, OS: RHEL 9

2. Processor: 2 x Intel Gold 5218R 2.10Ghz 20 Core

Regards

MWC

[ManoranjanDas]

Hello MWC,

Greetings from the day!

Thank you for sharing the information. As this query pertains to the design, we are currently consulting with our internal team. Once we receive an update from them, we will promptly provide you with the status.

Thank you for your understanding.

Best regards, 

Manoranjan. 

Intel Customer Support Technician 

intel.com/vroc 

[IntelSupport]

Hello MWC,

Greetings!

I would like to inform you that this feature is supported on the 2nd Generation Xeon processor series. For detailed information on the implementation, please refer the following link:

Intel® 64 and IA-32 Architectures Software Developer's Manual

Please refer to Section 7.3.17 for information on the Random Number Generator Instructions.

Regards,

Vikas

Intel Customer Support Technician

intel.com/vroc

[MWC]

Hi Vikas,

Thank you for the information.

Regards

MWC

[Amina_Sadiya]

Hello Mark,

Greetings of the day! 

Thank you for confirmation. Please let us know if you have any further questions or concerns. If No, Could you please confirm if we can go ahead and close this case. 

kindly reach out to us we are happy to help you. 

Regards,  

Amina  

Intel Customer Support Technician  

Intel.com/vroc  

[MWC]

Hi Amina,

Thank you. You may close the case.

Regards

MWC

[Amina_Sadiya]

Hello Team, 

Greetings of the day! 

Thank you for confirmation. We will go ahead and close this case. 

Thank you for your time and cooperation. It would be great if you could spare some of your time and provide us a feedback on the service provided. Your input will help us improve our support. 

“You may receive an invitation to take a survey in a few days. We value your feedback and look forward to hearing about your support experience.” 

kindly reach out to us we are happy to help you. 

Regards,  

Amina  

Intel Customer Support Technician  

Intel.com/vroc