Safe entropy source for encrypted virtual machines
Systems and methods for ensuring that data received from a virtual device is random are provided. A processing device may be used to generate, by a virtual device executing on a hypervisor, data intended for a virtual machine (VM) having a guest memory that includes one or more encrypted pages and one or more unencrypted pages. Data written to an encrypted page of the guest memory by the VM is encrypted using an encryption key assigned to the VM and information read from the encrypted page by the VM is decrypted using the encryption key. The hypervisor may write the data to the encrypted page, wherein the data is not encrypted by the encryption key assigned to the VM because it is written by the hypervisor. The VM reads the data from the encrypted page as randomized data because it cannot be properly decrypted by the encryption key.
1. A method comprising:
generating, by a virtual device executing on a hypervisor, data intended for a virtual machine (VM) having a guest memory that includes one or more encrypted pages and one or more unencrypted pages, wherein information written to an encrypted page of the guest memory by the VM is encrypted using an encryption key assigned to the VM and information read from the encrypted page by the VM is decrypted using the encryption key assigned to the VM;
writing, by a processing device, the data to an encrypted page of the guest memory using the hypervisor so that the data is not encrypted by the encryption key assigned to the VM; and
reading, by the VM, the data from the encrypted page as random data; and
denying the hypervisor access to the guest memory responsive to a determination of duplicative data.
2. The method of claim 1 , wherein reading the data from the encrypted page comprises improperly decrypting the data using the encryption key assigned to the VM, thereby randomizing the data.
3. The method of claim 1 , wherein writing the data to the encrypted page of guest memory comprises encrypting the data using an encryption key of the hypervisor.
4. The method of claim 1 , further comprising receiving one or more additional requests from the hypervisor to write data in the guest memory of the VM, and for each of the one or more additional requests, providing the hypervisor a different encrypted page of the one or more encrypted pages in which to write the data of the request.
5. The method of claim 1 , wherein the virtual device is an entropy source.
6. The method of claim 1 , wherein the data comprises predictable data.
7. A system comprising:
a memory; and
a processing device operatively coupled to the memory, the processing device to:
generate, by a virtual device executing on a hypervisor, data intended for a virtual machine (VM) having a guest memory that includes one or more encrypted pages and one or more unencrypted pages, wherein information written to an encrypted page of the guest memory by the VM is encrypted using an encryption key assigned to the VM and information read from the encrypted page by the VM is decrypted using the encryption key assigned to the VM;
write the data to an encrypted page of the guest memory using the hypervisor so that the data is not encrypted by the encryption key assigned to the VM;
read, by the VM, the data from the encrypted page as random data; and
deny the hypervisor access to the guest memory responsive to a determination of duplicative data.
8. The system of claim 7 , wherein to read the data from the encrypted page, the processing device is to improperly decrypt the data using the encryption key assigned to the VM, thereby randomizing the data.
9. The system of claim 7 , wherein to write the data to the encrypted page of guest memory using the hypervisor, the processing device is to encrypt the data using an encryption key of the hypervisor.
10. The system of claim 7 , wherein the processing device is further to receive one or more additional requests from the hypervisor to write data in the guest memory of the VM, and for each of the one or more additional requests, provide the hypervisor a different encrypted page of the one or more encrypted pages in which to write the data of the request.
11. The system of claim 7 , wherein the virtual device is an entropy source.
12. The system of claim 7 , wherein the data comprises predictable data.
13. A non-transitory computer readable medium, having instructions stored thereon that, when executed by a processing device, cause the processing device to:
generate, by a virtual device executing on a hypervisor, data intended for a virtual machine (VM) having a guest memory that includes one or more encrypted pages and one or more unencrypted pages, wherein information written to an encrypted page of the guest memory by the VM is encrypted using an encryption key assigned to the VM and information read from the encrypted page by the VM is decrypted using the encryption key assigned to the VM;
write, by the processing device, the data to an encrypted page of the guest memory using the hypervisor so that the data is not encrypted by the encryption key assigned to the VM;
read, by the VM, the data from the encrypted page as random data; and
deny the hypervisor access to the guest memory responsive to a determination of duplicative data.
14. The non-transitory computer readable medium of claim 13 , wherein to read the data from the encrypted page, the processing device is to improperly decrypt the data using the encryption key assigned to the VM, thereby randomizing the data.
15. The non-transitory computer readable medium of claim 13 , wherein to write the data to the encrypted page of guest memory using the hypervisor, the processing device is to encrypt the data using an encryption key of the hypervisor.
16. The non-transitory computer readable medium of claim 13 , wherein the processing device is further to receive one or more additional requests from the hypervisor to write data in the guest memory of the VM, and for each of the one or more additional requests, provide the hypervisor a different encrypted page of the one or more encrypted pages in which to write the data of the request.
17. The non-transitory computer readable medium of claim 13 , wherein the virtual device is an entropy source.