New answers tagged

2

The reason for this is indeed not obvious from the GnuPG user interface. RSA key generation requires to random prime numbers. GnuPG generates a primary key and an encryption subkey by default. Both of them are usually RSA keys, so they require two primes each, totaling four. This is also visible in the following message being printed twice, once for each ...


2

What is the exact meaning of “Keying material”? Keying material is a more general and fancy term for "secret keys of (unspecified) format, length and amount", where the "unspecified" part may be clarified depending on configuration or is just outsourced to other sections of the paper. It is this general to include things like shared Diffie-Hellman ...


2

What you have invented is essentially a random number generator, and not "a true one way function". A one way function is something that alwasy generates the same output for the same input, but can not be reversed. You use one way functions to hash things - how would you hash something with this scheme? So if it's a random number generator, is it ...


5

If you use some "natural" sound, you have lots of redudancy in it and this reduces the key strength (this may or may not be critical to your application). Because you cannot reproduce your sound key, you'll have to store it (in a passphase-locked key store). With this condition, a randomly generated strong key is always better.


2

A very interesting idea. I suppose that malware could indeed obtain a very hard to reproduce key like this, however there could be some issues : the target's microphone is muted there is a very low amount of sound in the room - no sound is captured I would suggest to have a fallback mechanism to a more classic key creation system if such conditions ...


1

First, we have the Endorsement Key (EK), an asymmetric Key. Each TPM owns a unique and identifiable EK. As it is unique and identifiable, we can clearly see privacy issues. So we created the AIK. An AIK is another key pair generated by the TPM, which will be signed by the EK. We can create multiple AIK. For an AIK to be used, we need to send the signed AIK ...



Top 50 recent answers are included