Introduction Truly random quantities are a raw ingredient for many cryptographic applications. Generating randomness by computer can be done but offers numerous opportunities for error and attack.
Simple dice present an attractive alternative if used properly.
This paper presents a number of techniques for using dice in conjunction with modern cryptographic software. A recent survey on PGP passphrase usage, which I conducted over the Internet and posted to sci.crypt.research, indicated that many PGP users choose weak passphrases. In the interest of getting users to adopt stronger passphrases, I have developed a Diceware Passphrase Generator. It is a simple technique for creating short, memorable passphrases that are highly secure. Best of all, it requires no computer hardware or software.