Conversation

Notices

1. Klaus Jónsson Zimmermann (kzimmermann)'s status on Sunday, 17-Dec-2017 04:25:46 UTC Klaus Jónsson Zimmermann
   Creating a new #PGP key this morning took soooo long! I guess that's the cost associated with good security though. Totally worth it.
   • Nobody [LinuxWalt (@lnxw48a1)] likes this.
   • Bob Mottram (bob)'s status on Sunday, 17-Dec-2017 09:49:14 UTC Bob Mottram

     in reply to
     @kzimmermann No HRNG?
   • Klaus Jónsson Zimmermann (kzimmermann)'s status on Sunday, 17-Dec-2017 10:31:36 UTC Klaus Jónsson Zimmermann

     in reply to

     • Bob Mottram
     @bob all I had was this cheap laptop and Linux's CSRNG. I know it uses up the entropy quickly, but this time it was strangely slow
   • Bob Mottram (bob)'s status on Sunday, 17-Dec-2017 10:34:43 UTC Bob Mottram

     in reply to
     @kzimmermann I currently use http://altusmetrum.org/ChaosKey
   • Klaus Jónsson Zimmermann (kzimmermann)'s status on Sunday, 17-Dec-2017 11:43:25 UTC Klaus Jónsson Zimmermann

     in reply to

     • Bob Mottram
     @bob neat-o. But is there any security issues when generating a random key or cert without the aid of such a device?
   • Bob Mottram (bob)'s status on Sunday, 17-Dec-2017 11:50:39 UTC Bob Mottram

     in reply to
     @kzimmermann Not really. You shouldn't need a HRNG, but having one means that the creation of large keys is significantly faster and that the system rarely or never gets low on the entropy pool.