| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
solutions/confidential-migvm: use hardware true random (RNDRRS + RNDR) Replace the weak pseudo-random generator (misnamed chacha20, 64-bit state seeded only from cntvct_el0) with ARM hardware true random numbers. Strategy (3-tier fallback in rand_u64): 1. RNDRRS (reseeded, higher entropy) — retry up to 8 times, return on first valid sample 2. RNDR — single read as fallback when RNDRRS keeps failing 3. splitmix64 software PRNG — last-resort for TCG test environments Implementation notes: - Detect RNDR/RNDRRS via ID_AA64ISAR0_EL1 before use to avoid UNDEFINED exception on cores without the Random Number Extension. - Read RNDR via system register encoding S3_3_C2_C4_0 and RNDRRS via S3_3_C2_C4_1 (the LLVM assembler does not accept the mnemonic form). - Check the V condition flag (cset vc) for success per ARM spec. - Filter 0 returns in both rndr_read() and rndrrs_read(): some VirtCCA TMM implementations misreport the V flag on RNDRRS (set V=0/success while returning 0 when the reseed source is temporarily not ready). Treat 0 as failure to avoid feeding fake randomness upstream. - init() retries RNDR up to 8 times before declaring it unavailable. - main.rs prints 16 samples each for RNDR and RNDRRS at boot for diagnosis. Verified on aarch64 VirtCCA host: - RNDR: 16/16 non-zero, all distinct - RNDRRS: 8 non-zero + 8 filtered-to-X (0 returns correctly rejected) - DHCP + TCP listen on 5001/5002: PASS - QEMU TCG: RNDR/RNDRRS unavailable, software PRNG fallback, boot PASS | 19 天前 | |
add tpm code | 11 天前 | |
Rename dir solution -> solutions, init confidential-migvm solution. | 28 天前 | |
solutions: add SecAFS — secure agent filesystem backed by openGauss SecAFS provides a transactional, auditable, rollback-capable filesystem for AI agents, backed by openGauss (PostgreSQL-compatible), with an OpenClaw agent-gateway integration. Licensed under MulanPSL-2.0. Signed-off-by: kouzili77 <kouzili@foxmail.com> | 26 天前 |
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
| 19 天前 | ||
| 11 天前 | ||
| 28 天前 | ||
| 26 天前 |