Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use of RDSEED/RDRAND on AMD with OpenSSL 3.x #5569

Open
jumaffre opened this issue Aug 18, 2023 · 0 comments
Open

Use of RDSEED/RDRAND on AMD with OpenSSL 3.x #5569

jumaffre opened this issue Aug 18, 2023 · 0 comments

Comments

@jumaffre
Copy link
Contributor

AMD SEV-SNP builds are currently on Ubuntu 20.04 and so OpenSSL 1.1.x is used there. This lets us make use of OpenSSL's ENGINE_x API to use RDSEED/RDRAND. However, on SGX builds, RDSEED/RDRAND are implicitly used via Open Enclave's OpenSSL 3.x (see here).

When AMD builds are moved to OpenSSL 3.x (e.g. via the upgrade to Ubuntu 22.04), we should change the use of the ENGINE_x API which is deprecated on OpenSSL 3.x, and instead make us of the new provider API. As discussed with @achamayou, this is better than building OpenSSL 3.x with --with-rand-seed=rdcpu ourselves).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant