|Reported by:||Tsso||Owned by:|
|Guest type:||all||Host type:||other|
Many cryptographic operations depend on good entropy. Bad entropy results in weak keys and poor security.
There is no information about entropy quality available on virtualbox.org.
What sources of entropy are available to virtual machines? How good are those sources? Does the virtual CPU have an accurate TSC or does it provide entropy? Does the --synthcpu option change anything?
Does Virtual Box implement any measures to provide good entropy to virtual machines?
None of these questions is answered on virtualbox.org.