Tavis Ormandy wrote: > it doesnt buy an attacker any advantage if he can guess it. If so, it raises the question of why GnuPG bothers with any attempt at obfuscating it.