Providing isolated entropy elements

摘要

Embodiments of the invention relate to providing isolated entropy elements for a virtual machine to increase entropy in a computing environment. At least one virtual machine is deployed on a hypervisor. The hypervisor generates entropy elements based on triggers related to a virtual machine. Identifiers are assigned to the entropy elements based on the triggers and the virtual machine. Use of the entropy elements is restricted for the virtual machine based on the assigned identifiers. The increase in entropy through providing isolated entropy elements for a virtual machine deployed on a hypervisor reduces the success of external attacks on data residing within the computing environment.

主权项

1. A method comprising:
deploying at least one virtual machine on a hypervisor; generating entropy elements by the hypervisor based on triggers, including a first and second entropy element, wherein the first entropy element is associated with a first trigger and the second entropy element is associated with a second trigger; assigning a separate identifier to each of the first and second generated entropy elements, wherein the entropy elements based on triggers for a selected virtual machine are assigned a same identifier; restricting use of the entropy elements for the selected virtual machine to entropy elements having the same identifier; building an entropy element pool with two or more entropy elements having the same identifier; and mixing entropy elements of two different entropy pools, including a first entropy element pool of a first virtual machine with entropy elements of a second entropy element pool of a second virtual machine, wherein the mixing comprises selecting at least one entropy element from the first entropy element pool and including the selected entropy element in the second entropy element pool.