Re: Tor exit nodes

[Theodore Ts'o <tytso@mit.edu>]

On Tue, Oct 17, 2017 at 11:27:49PM +0000, Thorsten Glaser wrote:
> Florian Weimer dixit:
> 
> >On the other hand, one of the most attractive aspects of these devices
> >for the majority of users is that the private key cannot leave the
> >device
> 
> True, but that’s of no use if the key is predictable.

I've always wanted a backup of my keys in case the Yubikey gets
destroyed, so I've always generated my key using an off-line computer,
where I've carefully made sure the entropy pool has been well seeded.

The keys are generated onto a ramdisk, and then copied into a Yubikey,
and a secure USB key which has an external keypad where you enter a
7-15 digit numeric code in order to activate it.  There are many
products available, but I'm personally fond of the Aegis Secure
Key[1], since it is weather-sealed against Dust and Water and
internally the electronics are encased in Epoxy to protect against
physical access to the flash chip.  Since it's very robust, and
relatively small, I can keep it with me at all times.

[1] https://www.apricorn.com/aegis-secure-key-2

						- Ted