On-card key generation (was: Rotating encryption keys)

[Peter Lebbing]

On 21/01/16 13:34, Lachlan Gunn wrote:
> You can generate the key on-chip so that it is unable to ever leave the
> smartcard, which is obviously desirable from a security point of view.

I think I prefer off-card generation, with GnuPG's random number generator,
rather than some low-power, proprietary hardware random number generator on a
smartcard.

Peter.

-- 
I use the GNU Privacy Guard (GnuPG) in combination with Enigmail.
You can send me encrypted mail if you want some privacy.
My key is available at <http://digitalbrains.com/2012/openpgp-key-peter>