Openssl RDRAND engine usage

[Kavitha]

Hi,

We plan to use RDRAND openssl engine to seed the kernel (/dev/random) to provide good entropy in Virtual Platform.

Please suggest how frequently this instruction can be executed and any recommendation of the bytes to be read?

[David_G_Intel]

Hello Kavitha

Thank you for posting on the Intel️® communities. 

Please share more information about the current setup.

Regards, 

David G 

Intel Customer Support Technician 

[Kavitha]

Hi David,

These are the processor we use

Intel Xeon Silver 4110 CPU @ 2.10GHz

Intel Xeon Gold 6126 CPU @ 2.60 GHz

Intel Xeon Gold 5118 CPU @ 2.30 GHz

We plan to install ESXi 6.7/7.0 on them and deploy VM of different configurations.

On the VM we intend to use RDRAND instruction as an entropy source as it is NIST complaint /secure to seed the /dev/random.

Thanks

Kavitha

[David_G_Intel]

Thank you for the update, the processors mentioned are server products. We moved the thread to the appropriate forum:

• Intel Community > Hardware Products > Server Products

The correct team will get back to you with more information. 

Regards, 

David G 

Intel Customer Support Technician 

[IntelSupport]

Hello Kavitha,

Based on your support request, we recommend that you submit your questions to the Intel® Developer Zone.

Intel® Developer Zone - Contact Page

https://software.intel.com/en-us/support

You can submit your ticket through the Online Service Center at https://www.intel.com/supporttickets for support.

• See How to Create a Support Request at the Online Service Center. https://software.intel.com/en-us/articles/how-to-create-a-support-request-at-online-service-center

For reference purposes, we are including the Intel® Digital Random Number Generator (DRNG) Software Implementation Guide

https://software.intel.com/content/www/us/en/develop/articles/intel-digital-random-number-generator-drng-software-implementation-guide.html

Regards,

Wanner G.

Intel Customer Support Technician