commit 62c6eea47025b9ead396f01c5a71dde1b76cd039 Author: Georg Koppen gk@torproject.org Date: Wed Sep 21 12:44:51 2016 +0000

Add new subkeys for Tor Browser's and gk's key --- docs/en/signing-keys.wml | 5 +++-- docs/en/verifying-signatures.wml | 10 +++++++--- 2 files changed, 10 insertions(+), 5 deletions(-)

diff --git a/docs/en/signing-keys.wml b/docs/en/signing-keys.wml index 06ef0a4..343f266 100644 --- a/docs/en/signing-keys.wml +++ b/docs/en/signing-keys.wml @@ -103,8 +103,8 @@ pub 4096R/4B7C3223 2013-07-30 Key fingerprint = 35CD 74C2 4A9B 15A1 9E1A 81A1 9437 3AA9 4B7C 3223 uid Georg Koppen <gk@torproject.org> - sub 4096R/24690903 2015-07-20 [expires: 2016-07-19] - sub 4096R/631602F4 2015-07-20 [expires: 2016-07-19] + sub 4096R/0x2F7477373D6B000D 2016-08-01 [expires: 2017-09-11] + sub 4096R/0xAA602CC00C257CF7 2016-08-01 [expires: 2017-09-11]

pub 4096R/D0220E4B 2014-03-19 Key fingerprint = 4A90 646C 0BAE D9D4 56AB 3111 E5B8 1856 D022 0E4B @@ -121,6 +121,7 @@ uid Tor Browser Developers (signing key) <torbrowser@torproject.org> sub 4096R/0x2E1AC68ED40814E0 2014-12-15 [expires: 2017-08-25] sub 4096R/0x7017ADCEF65C2036 2014-12-15 [expires: 2017-08-25] + sub 4096R/0xD1483FA6C3C07136 2016-08-24 [expires: 2018-08-24]

pub 2048R/0x42E86A2A11F48D36 2011-05-11 [expires: 2017-05-09] Key fingerprint = B744 17ED DF22 AC9F 9E90 F491 42E8 6A2A 11F4 8D36 diff --git a/docs/en/verifying-signatures.wml b/docs/en/verifying-signatures.wml index 6d96984..94ad398 100644 --- a/docs/en/verifying-signatures.wml +++ b/docs/en/verifying-signatures.wml @@ -80,6 +80,7 @@ uid Tor Browser Developers (signing key) torbrowser@torproject.org sub 4096R/F65C2036 2014-12-15 sub 4096R/D40814E0 2014-12-15 + sub 4096R/C3C07136 2016-08-24 </pre> <p>To verify the signature of the package you downloaded, you will need to download the ".asc" file as well. Assuming you downloaded the @@ -95,7 +96,8 @@ <p>Currently valid subkey fingerprints are: <pre> 5242 013F 02AF C851 B1C7 36B8 7017 ADCE F65C 2036 - BA1E E421 BBB4 5263 180E 1FC7 2E1A C68E D408 14E0</pre></p> + BA1E E421 BBB4 5263 180E 1FC7 2E1A C68E D408 14E0 + A430 0A6B C93C 0877 A445 1486 D148 3FA6 C3C0 7136</pre></p> <p> Notice that there is a warning because you haven't assigned a trust index to this person. This means that GnuPG verified that the key made @@ -131,7 +133,8 @@ Key fingerprint = EF6E 286D DA85 EA2A 4BA7 DE68 4E2C 6E87 9329 8290 uid Tor Browser Developers (signing key) torbrowser@torproject.org sub 4096R/F65C2036 2014-12-15 - sub 4096R/D40814E0 2014-12-15</pre> + sub 4096R/D40814E0 2014-12-15 + sub 4096R/C3C07136 2016-08-24</pre> <p>To verify the signature of the package you downloaded, you will need to download the ".asc" file as well. Assuming you downloaded the package and its signature to your Downloads folder, run:</p> @@ -152,7 +155,8 @@ Primary key fingerprint: EF6E 286D DA85 EA2A 4BA7 DE68 4E2C 6E87 9329 8290</pre> <p> Currently valid subkey fingerprints are: <pre> 5242 013F 02AF C851 B1C7 36B8 7017 ADCE F65C 2036 - BA1E E421 BBB4 5263 180E 1FC7 2E1A C68E D408 14E0</pre></p> + BA1E E421 BBB4 5263 180E 1FC7 2E1A C68E D408 14E0 + A430 0A6B C93C 0877 A445 1486 D148 3FA6 C3C0 7136</pre></p> <p> Notice that there is a warning because you haven't assigned a trust index to this person. This means that GnuPG verified that the key made