Key generation: is it possible to fail fast?
Tobias Mueller
muelli at cryptobitch.de
Fri Feb 17 16:17:13 CET 2017
Hi.
On Fri, Feb 17, 2017 at 01:39:01PM -0000, Bjarni Runar Einarsson wrote:
> If the system doesn't have enough entropy, and generates entropy
> too slowly to create a key within a "reasonable time frame",
> would it be possible to detect that and fail early?
Hm. I guess you could run a timer and abort the key generation (e.g. kill the
process) if it's taking you too long.
> Of course, anything that can be done to speed up key generation
> would be ideal
ECC keys are super fast to generate.
I've seen people installing havegd in virtual machine environments
to emulate entropy.
Cheers,
Tobi
More information about the Gnupg-devel
mailing list