[tor-talk] GnuPG key transition

Jacob Appelbaum jacob at appelbaum.net
Thu May 17 03:15:25 UTC 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

I have retired all of my old PGP/GnuPG keys. My new GPG key is 0x4193A197:

pub   4096R/4193A197 2012-05-16
      Key fingerprint = 228F AD20 3DE9 AE7D 84E2  5265 CF9A 6F91 4193 A197
uid                  Jacob Appelbaum (offline long term identity key)
<jacob at appelbaum.net>
uid                  Jacob Appelbaum (offline long term identity key)
<jacob at torproject.org>
sub   3072R/D81D840E 2012-05-16 [expires: 2013-05-16]
sub   3072R/616BA040 2012-05-16 [expires: 2013-05-16]

You may fetch this key with GnuPG with the long form:

  gpg --recv-key 0x228FAD203DE9AE7D84E25265CF9A6F914193A197

The long term secret key is stored offline and guarded by orks.
The two subkeys are stored in hardware and guarded by some firmware garbage.

I plan to rotate the subkeys at least on a yearly basis but perhaps sooner.

My previous key '0757 31DE 8F58 7679 225C  F287 718B 3356 42DD E84F'
expires on
2012-05-17 and should be considered retired. All other keys are also
retired.

-----BEGIN PGP SIGNATURE-----
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=M086
-----END PGP SIGNATURE-----
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

I have retired all of my old PGP/GnuPG keys. My new GPG key is 0x4193A197:

pub   4096R/4193A197 2012-05-16
      Key fingerprint = 228F AD20 3DE9 AE7D 84E2  5265 CF9A 6F91 4193 A197
uid                  Jacob Appelbaum (offline long term identity key) <jacob at appelbaum.net>
uid                  Jacob Appelbaum (offline long term identity key) <jacob at torproject.org>
sub   3072R/D81D840E 2012-05-16 [expires: 2013-05-16]
sub   3072R/616BA040 2012-05-16 [expires: 2013-05-16]

You may fetch this key with GnuPG with the long form:

  gpg --recv-key 0x228FAD203DE9AE7D84E25265CF9A6F914193A197

The long term secret key is stored offline and guarded by orks.
The two subkeys are stored in hardware and guarded by some firmware garbage.

I plan to rotate the subkeys at least on a yearly basis but perhaps sooner.

My previous key '0757 31DE 8F58 7679 225C  F287 718B 3356 42DD E84F' expires on
2012-05-17 and should be considered retired. All other keys are also retired.

-----BEGIN PGP SIGNATURE-----

iQIVAwUBT7RsJHGLM1ZC3ehPAQgJPg/+ImxM8meNj1d/ikyUL8SrIZEBURgF/QzT
L7z6eVGEpM9iJy3kHZMT3Dc2GWtZT74TaHr65kvEzco+LvtgbrBa7f8ByLTp+TFo
Z2oHXILguCPRT/KgRlQMybVC7Ir5Dj1NM5bYDegdgKbB04/7u/mJ9KBB7hIhtW7K
tFR1bLJwcHLVh8MqvIpHwrF1McLlVoHJzSRfztapNs0BlVr16DnlfJD3T28Vw3+S
mo3Hhy2vnH9f7oPZGQX3MRrkUNLPy//js0yWnKYkKEifpAwDNlzjoWZwhB/mG2tw
jtQtj3Yzwi9uES1/Jxigj5TQI9KXjGeYkVFY9/ICcsufrZGykpsVNOuoYCpNHjRn
dTOtM6i0DfIq+p0kW+x+NRISKJyF/WaXiMFJneidzjgYWKEClWHH8AkzGNLHwtk5
GNcY4euZgP1cdd+CQdM/zIqdEPyqlatE4vUby83ZdeDXDF9tcZhmJ/xuy54bxJth
1M5qqqTBmmAFX5uGetNUFAz4qq3XdopF4ppRl/a/x92X6gbuSZH7XtvgbnLnI360
AikkZNGKizfJjI3sQDY2CxXWa332PqM3o96Do2EUPoAbXZa2VfvzrfdvcpUSReGg
r0WIg9+KZ/hm+IcQUvcqj9u/jhLwY5KFquw607eTT+nBRwIyCczmua68vWwFLejX
4Ssvqmp5Irs=
=M086
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 618 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20120516/8f63d095/attachment.pgp>


More information about the tor-talk mailing list