Is anything special planned for the LionsOS CSPRNG entropy server … if there is one?
Looking at QNX, I was surprised by how much it resembles a typical monolithic kernel entropy subsystem WRT the level of access it has. But without that direct access, I’m not sure how one would get entropy!
While one can prove the functional correctness of the internal workings of given CSPRNG algorithm (like optimal recovery time) I think the main system level concern would be to prove the absence of timing side channels. But one must assume the irreversibility of hash WRT confidentiality, correct?