lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date:   Thu, 9 Nov 2023 16:03:52 -0800
From:   Josh Poimboeuf <>
To:     Ingo Molnar <>
Cc:     "H. Peter Anvin" <>,
        Kristen Carlson Accardi <>,
        Hou Wenlong <>,,
        Lai Jiangshan <>,
        Thomas Gleixner <>,
        Ingo Molnar <>, Borislav Petkov <>,
        Dave Hansen <>,
        "maintainer:X86 ARCHITECTURE 32-BIT AND 64-BIT" <>,
        Anshuman Khandual <>,
        Mike Rapoport <>,
        Pasha Tatashin <>
Subject: Re: [PATCH RFC 1/7] x86/head/64: Mark startup_gdt and
 startup_gdt_descr as __initdata

On Wed, Oct 18, 2023 at 01:45:40PM +0200, Ingo Molnar wrote:
> * H. Peter Anvin <> wrote:
> > If the goal is better KASLR, then what we really should spend time on was 
> > Kristen Accardi's fgKASLR patches, which not only exponentially(!) 
> > increases the randomization entrophy but also *actually* avoids the "one 
> > leak and it's over" problem.
> Agreed. Going by this version of function-granularity KASLR from 3 years 
> ago:
> The fgKASLR feature looks entirely viable to me. Back then I presumed it 
> would get iterated beyond v3, and then it fell off my radar. :-/
> If Kristen or someone else would like to dust this off & submit a fresh 
> version it would be much appreciated!

That actually got up to v10:

Anyway, I'm also very interested in this.  If nobody else is working on
it then I could give it a try.

BTW I've wondered if translation-unit granularity would be more
preferable than function granularity due to improved i-cache locality
and (possibly) easier livepatch compatibility.


Powered by blists - more mailing lists