Batch generate keys without revocation cert?

Jonathan Cross jcross at gmail.com
Tue Feb 4 15:53:00 CET 2020


>
> On 2020-01-23 at 17:32 +0100, Jonathan Cross via Gnupg-users wrote:
>
> Hello,
> I would like to batch generate keys, but *not* have a revocation cert
> generated.
> I do not see an option for this, how can it be done?
> Thanks,  Jonathan
>
> From: ?ngel <angel at pgp.16bits.net>
> To: gnupg-users at gnupg.org
> Subject: Re: Batch generate keys without revocation cert?
> Hello Jonathan
> See if this helps
>
> https://www.gnupg.org/documentation/manuals/gnupg/Unattended-GPG-key-generation.html
> Anyway, you could always generate a revocation certificate and then
> discard it.
> Kind regards


Thank you Angel,
I am already making extensive use of  batching, but (as you can see on the
linked page), there is no option to remove revocation certificates from
being generated.
Was there something specific there that I overlooked?
As you mentioned, I am deleting the revocation cert, but this is suboptimal.

A bit of background...
I was trying to use this for generating "vanity" keys (while using all of
the gpg mechanics, entropy, etc) -- so I need it as fast as possible.
I have come to see that this is far too slow to get an interesting key ID
of my choosing, so I will continue looking into other options like this:
https://github.com/osresearch/pgp-vanity-keygen (with modifications for
Curve25519 added)

If there was an option to provide my own fixed entropy, that would also be
helpful as I'd like to create that using Diceware.

If you have any suggestions, please let me know.

Thanks!  Jonathan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20200204/c2870f65/attachment.html>


More information about the Gnupg-users mailing list