

TEA-KGEN(1)                 TEA Total                 TEA-KGEN(1)


NNAAMMEE
       tea-kgen - Generate a TEA Total private key

SSYYNNOOPPSSIISS
       tteeaa--kkggeenn  [  _-_c  ]  [ _-_P ] [ _-_p _p_a_s_s ][ _-_k _p_a_s_s ] [ _-_h ] [
       _k_e_y_-_f_i_l_e ]

DDEESSCCRRIIPPTTIIOONN
       The tteeaa--kkggeenn program generates a random TEA Total  private
       key  and  writes  it  to the specified key file. If no key
       file is specified, or the special name  "-"  is  used,  it
       writes  the  output to stdout instead. The key is an ASCII
       text string, so that iit is possible to back up or  trans-
       fer the key using nothing more than a pen and paper.

   OOPPTTIIOONNSS
       _-_h     Displays the help message.

       _-_c     Reads  the  specified  key  file  and writes it out
              again, possibly  with  password  protection  added,
              removed,   or   with  the  password  modified.  The
              BUILD_PPKEYS option must have been enabled at  com-
              pile time for this option to be available.

       _-_p     Specifies  the password for the input key file when
              using the _-_c flag rather  than  being  prompted  to
              enter  it  interactively.  Note  that  this  option
              should not be used on multi-user  systems,  as  the
              option  can be read in the system process list. The
              BUILD_PPKEYS option must have been enabled at  com-
              pile time for this option to be available.

       _-_P     Password  protects  the generated key. The password
              can be up to 64 characters in length, and can  con-
              tain   letters,  numbers,  and  symbols  (including
              spaces). The BUILD_PPKEYS  option  must  have  been
              enabled  at  compile  time  for  this  option to be
              available.

       _-_k     Specifies the password for the output key file when
              using  the  _-_P  flag  rather than being prompted to
              enter  it  interactively.  Note  that  this  option
              should  not  be  used on multi-user systems, as the
              option can be read in the system process  list.  It
              is also more dangerous because you are not prompted
              to re-enter  the  password  for  verification.  The
              BUILD_PPKEYS  option must have been enabled at com-
              pile time for this option to be available.

SSEEEE AALLSSOO
       teatotal(1), tea(1), untea(1)

BBUUGGSS
       When using the internal secure random number generator (as


24 December 2000                                                1


TEA-KGEN(1)                 TEA Total                 TEA-KGEN(1)


       opposed to the random device based generator used on oper-
       ating systems such as Linux  and  OpenBSD),  the  user  is
       required  to  hit 128 keys to create enough randomness for
       generating the key. This means that it can't be used in an
       automated script where no human is present to generate the
       randomness.

AAUUTTHHOORR
       Alex Holden <alex@linuxhacker.org>


24 December 2000                                                2