Re:Strategies for offline PGP key storage
by im3w1l on Thursday October 05, 2017 @04:54PM
(#15412506)
For RSA keys shouldn't it be possible to store some 256 bit seed and then use a deterministic algorithm to convert that to a 4096 bit key?
[ Parent
| on HN ]
Re:Strategies for offline PGP key storage
by ecesena on Friday October 06, 2017 @01:10PM
(#15418399)
Prime number generation is typically done like this. Pick a random number, then add 2 until you get a prime.
So you can do something similar. Pick a deterministically generated bit string, and use as key the next prime number (you need to do it twice, for p and q).
You certainly get less security and I unfortunately don't have any reference to quantify that.
As I was saying in another post, I'm writing about deterministic password generation (i.e. not RSA keys). Draft here: https://medium.com/@0x0ece/how-i-manage-my-passwords-technic...
Re:Strategies for offline PGP key storage
by icebraining on Thursday October 05, 2017 @06:05PM
(#15412920)
Even if there is, such a key would be much less safe (assuming the attacker knew the algorithm, which must be assumed, otherwise why keep the key in a safe?)