Change s2k count?
    Robert J. Hansen 
    rjh at sixdemonbag.org
       
    Thu Dec  3 21:48:25 CET 2009
    
    
  
Daniel Kahn Gillmor wrote:
> I like the elegance of this solution, but couldn't this calculation be
> confounded by other load on the processor?  For example, if i'm
> generating a new key (or changing a passphrase) while also encoding
> video, it would be a shame if gpg were to pick a too-low value.
As you said, there's an easy fix.  Why check times/gettimeofday when the
 lower-bound method works just as well?
The point is not to get asymptotically as high a count as possible.  The
point is to get enough of a count to slow down brute forcers.
    
    
More information about the Gnupg-devel
mailing list