Methods and apparatus for generating a random number in one or more isolated processors

1. A method, comprising:

providing at least one processor with an integrally disposed random number generator (RNG) therein;

entering a protected mode by said at least one processor, wherein said protected mode is an isolated mode in which neither said at least one processor nor any device external to said at least one processor may initiate a transfer of information: (i) into said at least one processor, (ii) out of said at least one processor, and (iii) both into and out of said at least one processor, wherein the isolated mode operates to protect the security of any random numbers generated in subsequent actions and to protect the integrity of secure modes within the at least one processor; and

generating a random number using said RNG in said at least one processor after entering said protected mode.

2. The method of claim 1 further comprising:

storing a program to increase a randomness in generation of said random number, the program is stored in encrypted form in a read only memory (ROM) within said at least one processor;

executing said program on said at least one processor.

3. The method of claim 2 wherein said program stored in said ROM is inaccessible by unauthorized entities.

4. The method of claim 2 further comprising:

loading said program after said entering said protected mode;

decrypting said program; and

running said program.

5. The method of claim 4 wherein said decrypting comprises: decrypting said program employing a private key stored in a ROM within said at least one processor.

6. The method of claim 1 further comprising:

verifying the authenticity of said program by executing a hash algorithm to produce a hash result; and

comparing said hash result to a predetermined hash value.

7. The method of claim 6 wherein said predetermined hash value is stored in a ROM within said at least one processor.

8. The method of claim 1 further comprising:

implementing a virtual private network (VPN) between said at least one processor and at least one other device, said implementing using said random number.

9. The method of claim 8 wherein said at least one other device is a processor located in a same multiprocessor system as said at least one processor.

10. The method of claim 8 wherein said at least one other device is external to a multiprocessor system in which said at least one processor is located.

11. The method of claim 1 wherein said RNG comprises a ring oscillator.

12. An apparatus, comprising

at least one processor with an integrally disposed random number generator (RNG) therein, wherein said at least one processor is operable to:

enter a protected mode by said at least one processor, wherein said protected mode is an isolated mode in which neither said at least one processor nor any device external to said at least one processor may initiate a transfer of information: (i) into said at least one processor, (ii) out of said at least one processor, and (iii) both into and out of said at least one processor, wherein the isolated mode operates to protect the security of any random numbers generated in subsequent actions and to protect the integrity of secure modes within the at least one processor; and

generate a random number using said RNG in said at least one processor after entering said protected mode.

13. The apparatus of claim 12 wherein said apparatus is further operable to:

store a program to increase a randomness in the generation of said random number in encrypted form in a read only memory (ROM) within said at least one processor;

execute the program on said at least one processor.

14. The apparatus of claim 13 wherein said program stored in said ROM is inaccessible by unauthorized entities.

15. The apparatus of claim 13 wherein said apparatus is further operable to:

load said program after said entering said protected mode;

decrypt said program; and

run said program.

16. The apparatus of claim 15 wherein said decrypting comprises:

decrypting said program employing a private key stored in a ROM within said at least one processor.

17. The apparatus of claim 15 wherein said apparatus is further operable to:

verify the authenticity of said program by executing a hash algorithm to produce a hash result; and

compare said hash result to a predetermined hash value.

18. The apparatus of claim 17 wherein said predetermined hash value is stored in a ROM within said at least one processor.

19. The apparatus of claim 12 wherein said apparatus is operable to:

implement a virtual private network (VPN) between said at least one processor and at least one other device, said implementing using said random number.

20. The apparatus of claim 19 wherein said at least one other device is a processor located in a same multiprocessor system as said at least one processor.

21. The apparatus of claim 19 wherein said at least one other device is external to a multiprocessor system in which said at least one processor is located.

22. The apparatus of claim 12 wherein said RNG comprises a ring oscillator.