Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

Required fields*

5
  • 17
    An empty passphrase is not a best practice. Yes, it is necessary for certain automated tasks, but those are exceptions. Your filenames are the defaults, making the use of -f output_keyfile unnecessary. Commented Apr 11, 2018 at 18:34
  • 6
    Does -a 100 have any value at all with an empty passphrase? It seems that such a key is still trivially brute-forceable (try nothing -- and it works!) Commented Mar 13, 2019 at 3:45
  • 6
    Please explain why you would use -a with an empty passphrase. This seems senseless, but I may be uneducated in this regard. Commented Jul 9, 2019 at 0:21
  • 4
    I tested this by using -a 1000 -N '' and there was no delay. With -a 1000 -N 'x' there is a delay. Conclusion: -a with -N has no effect. Commented Feb 6, 2022 at 3:05
  • 4
    Please add -C <comment> to add the service name that this key is being generated for... because [best practice] we all generate different keys for each service, right? Commented Feb 6, 2022 at 3:07