The rust-sev library used a OpenSSL's rand feature, which is based off of /dev/urandom. On virtual machines, /dev/urandom is seeded by the hypervisor. On untrusted systems, we cannot assume that the hypervisor has seeded /dev/urandom with randomly-generated bytes. Update rust-sev to 4.0.0, which uses the RDRAND instruction for CPU random number generation.
Please login to add feedback.
This update has been submitted for testing by tfanelli.
This update's test gating status has been changed to 'ignored'.
This is a breaking change (v3 -> v4) that needs to be coordinated with dependent packages.
I see, so all packages must be updated together? i.e. this built should've included all dependent builds as well?
Yes. I left a comment with a link to documentation on the snphost FTBFS bug.