[pkg-gnupg-maint] Bug#847552: Bug#847552: gnupg: decrypting after X pinentry is sometimes slow: around 10 seconds on a small file

[Vincent Lefevre]

On 2016-12-18 18:14:27 +0100, Werner Koch wrote:
> gpg needs to initialize its own RNG in almost all cases.  This is
> required for the generation of an internal cookie to verify
> --clearsigned messages and also for the RSA blinding (to mitigate side
> channel attacks).

Couldn't it cache the RNG status on disk?

BTW, I think my machine has enough entropy.

-- 
Vincent Lefèvre <vincent at vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)