[b]Issue T31: forward randomness from /dev/random to VMs in Qubes
Posted by @Patrick
January 1, 2015
Talked to Joanna at C1C3.
Qubes does not forward real randomness from /dev/random to VMs yet. They have no plans to add this feature yet.
Although Qubes installs haveged by default, it’s not clear if that is random enough. Randomness is a very difficult topic. Difficult to get down the rabbit hole. It’s better to bootstrap haveged with strong entropy and to have multiple sources of randomness.
In comparison, for KVM there is VirtIO RNG.
And I don’t think they implemented this because they were bored. I think in this case it’s better to be safe than sorry.
She said one could implement this using qrexec and that they would merge a patch implementing this.
General info on randomness: