.TH TEA\-KGEN 1 "" "24 December 2000" "TEA Total"
.SH NAME
tea\-kgen \- Generate a TEA Total private key
.SH SYNOPSIS
\fBtea\-kgen\fP [ \fI\-c\fP ] [ \fI\-P\fP ]
[ \fI\-p pass\fP ][ \fI\-k pass\fP ] [ \fI\-h\fP ] [ \fIkey\-file\fP ]
.SH DESCRIPTION
The \fBtea\-kgen\fP program generates a random TEA Total private key and writes
it to the specified key file. If no key file is specified, or the special name
"\-" is used, it writes the output to stdout instead. The key is an ASCII text
string, so that iit is possible to back up or transfer the key using nothing
more than a pen and paper.
.SS OPTIONS
.TP
\fI\-h\fP
Displays the help message.
.TP
\fI\-c\fP
Reads the specified key file and writes it out again, possibly with password
protection added, removed, or with the password modified. The BUILD_PPKEYS
option must have been enabled at compile time for this option to be available.
.TP
\fI\-p\fP
Specifies the password for the input key file when using the \fI\-c\fP flag
rather than being prompted to enter it interactively. Note that this option
should not be used on multi-user systems, as the option can be read in the
system process list. The BUILD_PPKEYS option must have been enabled at compile
time for this option to be available.
.TP
\fI\-P\fP
Password protects the generated key. The password can be up to 64 characters in
length, and can contain letters, numbers, and symbols (including spaces). The
BUILD_PPKEYS option must have been enabled at compile time for this option to
be available.
.TP
\fI\-k\fP
Specifies the password for the output key file when using the \fI\-P\fP flag
rather than being prompted to enter it interactively. Note that this option
should not be used on multi-user systems, as the option can be read in the
system process list. It is also more dangerous because you are not prompted to
re-enter the password for verification. The BUILD_PPKEYS option must have been
enabled at compile time for this option to be available.
.SH "SEE ALSO"
teatotal(1), tea(1), untea(1)
.SH BUGS
When using the internal secure random number generator (as opposed to the
random device based generator used on operating systems such as Linux and
OpenBSD), the user is required to hit 128 keys to create enough randomness for
generating the key. This means that it can't be used in an automated script
where no human is present to generate the randomness.
.SH AUTHOR
Alex Holden <alex@linuxhacker.org>