The lack of quality sources of entropy in cloud computing environment is a problem that has gained considerable attention this year, and has consequences that permeate the entire fabric of cryptography in enterprises. Virtual machines typically lack physical hardware devices that provide random noise, such as microphones, wireless adapters, or serial bus interrupts. Monitoring network interrupts generated by traffic (such as ARP requests) is one of the few sources of unpredictable input in cloud networks, but even that traffic can be somewhat scarce in some networks. Without sufficient randomness, servers routinely generate vulnerable TLS certificates and predictable RSA/DSA private SSH keys.
In this session, well discuss a draft RFC, proposing a network protocol for peer-to-peer exchange of randomness, review an open source implementation of that protocol in C, consider the results of some entropy quality tests, propose its inclusion as an OpenStack Incubator project. Well consider the opportunity for collaboration among cloud guests to interchange randomness in ways that defy predictably from outside observers, internal users, as well as offline users.
We'll also discuss other potential solutions to the problem, such as passing through Intel's new DRNG to guests, extending Nova to seed guests with better entropy through a virtio or disk device, as well as other suggestions brought by attendees.
Getting Physical: Using OpenStack to Provision and Manage Physical Servers, not just VMs
Gur Saran Varma
From the Outside Looking In: The Analyst Perspective on OpenStack
Krishnan Subramanian, Stephen O\'Grady, Gary Chen, Sean Michael Kerner, Gretchen Curtis
OpenStack Distributions: How they will shape the future of OpenStack innovation
Nick Barcet, Christopher Aedo, Perry Myers, Kamesh Pemmaraju, Joseph George, Pete Chadwick
International updates from Brazil, China, Vietnam, India
Yuije Du ???, Renato Serra Armani, Trung Nguyen, Sriram Subramanian
Panel: Network Virtualization - The Next Big Thing?
Ken Pepple, Gavin Pratt, Dan Mihai Dumitriu, Mike Cohen
Achieving Visibility and Insight Across OpenStack Projects with Dashboards, Traceability, and Faceted Search
Sanjiva Nath, Stefano Maffulli
Panel: How to Establish and Sustain Successful OpenStack Meetup Groups
Sean Roberts, Kamesh Pemmaraju
Moving an Open Source Project to a Foundation ? Lessons from the OpenStack Project
Eileen Evans, Alice King
Understanding the Patent Context of Linux/OSS: Developing a Thoughtful Strategy to Ensure OpenStack's Future
Cloudifying Virtual Desktops: How OpenStack Can Reduce the Cost and Complexity of Virtual Desktops