I think I see what you are saying - that gpg blocking, and failing to create a key on a VM, is actually a desired behavior, and that the only real problem is gpg doesn&#x27;t time out more quickly and say something like, &quot;System not providing sufficient entropy for key generation&quot;.<p>But, if that&#x27;s the case, then the entire thesis behind, &quot;Use &#x2F;dev&#x2F;urandom&quot; is incorrect.  We can&#x27;t rely on &#x2F;dev&#x2F;urandom, because it might not generate sufficiently random data.  &#x2F;dev&#x2F;random may block, but at least it won&#x27;t provide insecure sequences of data.<p>This is kind of annoying, because I was hoping that just using &#x2F;dev&#x2F;urandom was sufficient, but apparently there are times when &#x2F;dev&#x2F;random is the correct choice, right?