Conversation

Notices

1. Klaus Jónsson Zimmermann (kzimmermann@quitter.se)'s status on Saturday, 16-Dec-2017 23:25:46 EST Klaus Jónsson Zimmermann
   Creating a new #PGP key this morning took soooo long! I guess that's the cost associated with good security though. Totally worth it.
   1. Bob Mottram (bob@social.freedombone.net)'s status on Sunday, 17-Dec-2017 04:49:14 EST Bob Mottram

      in reply to
      @kzimmermann No HRNG?
      1. Klaus Jónsson Zimmermann (kzimmermann@quitter.se)'s status on Sunday, 17-Dec-2017 05:31:36 EST Klaus Jónsson Zimmermann

         in reply to
         @bob all I had was this cheap laptop and Linux's CSRNG. I know it uses up the entropy quickly, but this time it was strangely slow
         1. Bob Mottram (bob@social.freedombone.net)'s status on Sunday, 17-Dec-2017 05:34:43 EST Bob Mottram

            in reply to
            @kzimmermann I currently use http://altusmetrum.org/ChaosKey
            1. Klaus Jónsson Zimmermann (kzimmermann@quitter.se)'s status on Sunday, 17-Dec-2017 06:43:25 EST Klaus Jónsson Zimmermann

               in reply to
               @bob neat-o. But is there any security issues when generating a random key or cert without the aid of such a device?
               1. Bob Mottram (bob@social.freedombone.net)'s status on Sunday, 17-Dec-2017 06:50:39 EST Bob Mottram

                  in reply to
                  @kzimmermann Not really. You shouldn't need a HRNG, but having one means that the creation of large keys is significantly faster and that the system rarely or never gets low on the entropy pool.