3 ms·
> and yubikeys in particular had an issue where some accidentally created very weak keys. So did Debian between 2006 and 2008 https://certlogik.com/debian-weak
by Xylakant 6y ago
> and yubikeys in particular had an issue where some accidentally created very weak keys.
So did Debian between 2006 and 2008 https://certlogik.com/debian-weak-key-check/ https://certlogik.com/debian-weak-key-check/
- corty 6y agoYes, but software is easier to fix and the problem is easier and more probable to find.
- namibj 6y agoMore importantly: you can check the key generator to not include a Dual_EC_DRBG.
- namibj 6y agoIn OpenSSL. Not in GnuPG. I'm not claiming the latter necessarily has better code, but the former's bad code quality is known.