gopass/docs/entropy.md
Jean Jordaan 393dd0391d Editing while reading (#890)
* Editing while reading

Signed-off-by: Jean Jordaan <jean.jordaan@gmail.com>

* Hyphenate sub-store

Signed-off-by: Jean Jordaan <jean.jordaan@gmail.com>

* Markup literals

Signed-off-by: Jean Jordaan <jean.jordaan@gmail.com>

* "it's" is "it is", "its" is possessive.

Signed-off-by: Jean Jordaan <jean.jordaan@gmail.com>

* Make clear that it's the .config in $HOME

Signed-off-by: Jean Jordaan <jean.jordaan@gmail.com>

* Use commas for phrasing

Signed-off-by: Jean Jordaan <jean.jordaan@gmail.com>

* Hyphenate sub-command

Signed-off-by: Jean Jordaan <jean.jordaan@gmail.com>

* Mark bash blocks as bash

Signed-off-by: Jean Jordaan <jean.jordaan@gmail.com>

* Add some semantic linebreaks; fix code block quoting

Signed-off-by: Jean Jordaan <jean.jordaan@gmail.com>

* Improve phrasing

Signed-off-by: Jean Jordaan <jean.jordaan@gmail.com>

* Markup, commas ..

Signed-off-by: Jean Jordaan <jean.jordaan@gmail.com>

* gopass is consistently lowercase

Signed-off-by: Jean Jordaan <jean.jordaan@gmail.com>

* Add some linebreaks, improve phrasing

Signed-off-by: Jean Jordaan <jean.jordaan@gmail.com>
2018-08-11 07:17:35 +02:00

1.2 KiB

Entropy

Generating cryptographic keys needs a lot of entropy. Especially gnupg --gen-key depletes the kernel entropy pool (/dev/random) quite fast and may appear to be stuck when it's waiting for new entropy.

If you wonder how to speed this up consider installing rng-tools if this is available on your platform.

After installing rng-tools please make sure rngd is actually running and replenishing your entropy pool.

You can do so by keeping a watch on your available entropy and running an entropy consuming process as follows:

watch -n1 cat /proc/sys/kernel/random/entropy_avail
# switch to another terminal / screen
cat /dev/random | rngtest -c 1000

The second command should complete within a few seconds and report no errors. If it takes much longer you probably don't have an hardware RNG and will have to generate some entropy by triggering some network activity and input.

You should avoid havaged.

Debian / Ubuntu

sudo apt-get install rng-tools

CentOS / Fedora / Red Hat

sudo yum install rng-tools

Further Information