Signing keys on a low-entropy system

Johannes Zarl johannes at zarl.at
Fri Nov 8 14:17:53 CET 2013


The hardware-RNG somehow slipped under my radar. Thanks for pointing that out.

Out of curiosity: how does GnuPG deal with a system where entropy is scarce 
(or worse yet, where the RNG is partly predictable)?

Cheers,
  Johannes


On Friday 08 November 2013 08:31:09 René Puls wrote:
> Hi,
> 
> On Fri, 08 Nov 2013 00:11:38 +0100 Johannes Zarl <johannes at zarl.at>
> 
> wrote:
> > I'm currently thinking about using a raspberry pi as a non-networked
> > stand- alone system for signing keys. Since I haven't heard anything
> > to the contrary, I'm pretty sure that entropy is relatively scarce on
> > the pi.
> 
> The Raspberry Pi has a hardware RNG that is supported by rng-tools,
> which is more than most desktop PCs have:
> 
> http://scruss.com/blog/2013/06/07/well-that-was-unexpected-the-raspberry-pis
> -hardware-random-number-generator/
> 
> Not sure about its quality though...
> 
> René



More information about the Gnupg-users mailing list