GPG Key Transition

As part of improving my OPSEC, I am transitioning from my old GPG key to a new one. This blog post contains my signed transition statement. For easier verification, you may also download the transition statement directly.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

I am transitioning GPG keys away from an old 4096-bit RSA key to a new
4096-bit RSA key. There is no urgent reason for this transition. I
have chosen to generate and store this new key more securely than my
existing key.

The old key will continue to be valid for some time, but I prefer all
new correspondences to be encrypted with the new key, and will be
making all signatures going forward with the new key.

This transition document is signed with both keys to validate the
transition.

My old key, which I am transitioning away from, is:

    pub   4096R/0x464F0A89D3EF9CAE 2013-09-04 [expires: 2018-09-03]
          Key fingerprint = 5F9A 1D6B 7885 1B60 FC84  9131 464F 0A89 D3EF 9CAE

My new key, which I am transitioning to, is:

    pub   4096R/0xAB85B8259D8CEFF1 2015-05-15 [expires: 2020-05-13]
          Key fingerprint = C860 544F 9571 4734 8FA2  E7F6 AB85 B825 9D8C EFF1

To fetch the new key from the keyservers, run:

    gpg --recv-key 0xAB85B8259D8CEFF1

My new key is also available from my website:
<http://garrett.io/key.asc>. The file at this URI will not be
regularly updated; please obtain the latest signatures, subkeys, and
other addenda from your favorite keyserver after download.

If you have already validated my old key, you can then validate that the
new key is signed by my old key:

    gpg --check-sigs 0xAB85B8259D8CEFF1

Please contact me via e-mail at <garrettr@riseup.net> if you have any
questions about this document or this transition.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
Comment: GPGTools - https://gpgtools.org

iQIcBAEBCgAGBQJVVn3iAAoJEOCvMFEpTh5btF4P/1mDbAo/STCpXNGE0z7oJvcf
vQKEqG6yYBoKmuCJBsNhBhwnR69FxViGGVuii7+aNmwa85YrxvGDXLoMkw03sCVM
qYNJYWwAqjEyL1wC0/BKKn+S5GzayljEijFEjzkis3bhTOgbW8fzNmdU1JKlzwMh
8+YdnZ4+Kiw9dksnlOu9NBOkslpl2O5bc+kL198oXCcYjqApb16Em+EPMVXE0Cu+
hGl7APcAXsb4p/sQ3eL4fCEWnOdx1yM5RHHvnu45kP3PDbtJovgIwUUrbpFkZN4x
OTTc3UpfeFQA0UE08sDm4tHUQNO8o3v0qqFrW5vTfG1C9Z9yDFv7Vqbsi4owo39P
1g2ivKEDaYAkHsRssNfiH0LvabZXOJIbFhxHW9kgKMncROnzWr6B/pW2hIuQlipc
Gu/8d9az+413FwLKWz5pp/CKYWcfkRM7KdwSmOF2UHFQJ4IhH2LDyHPDqd8+noaD
KnxPEZo4h4VKVE6vsIoZFykFv5OMU9rie8AfvTnQ2Ytn4oPrnDS0AlqDPFvdLD5P
JjjEOoRx+QSZ9XYEMmIe6w54DUxXElZekh811CK2IM1yOQZzxOPLl5v9Qi94gs4s
gGOcMh7R9Y7zPLtsqLU22/qjcTHkVOwGGvwebvuioxyABVg06Jf7mhcFjp//zveq
8mkTVBR0zPz/Jcja0YgmiQIcBAEBCgAGBQJVVn3rAAoJEEZPConT75yu3GIP/ieR
fcUebKV5+DlzrGOr78wiWpxQCJMI5gHjjeQStu9R2b7wfqpENF5nhQf9Oi8Po5Tw
EOe1HVg6ZjO/+EGO4stmEOVLrp6nS0sWM5gVrdOJVqhYh+X7khXzI/PudNCzkhCF
QESmPFNm8t1MoD/YzupHXwjj77DEhKiTZNYR9+ePpa5PITgO+WDgpLaRW7+Kgx2C
gxvL9aczwtRXXW6QoGHC786lG2bWZCkMRROkO19VZWAMvdriAXBNKj7hh+d53Qb8
hpRrHt9r5ugjFdbUlU+aO7cbseb27hCg1l8Momk981Xw05huvgW6tVgl3+sKVSfY
dZ1zkXku/T+GrlYOnEaia9ftDXOB1IQ8COlX8jMqnKocO5cwAtHq9iI6xxxmKehZ
pO89XWS1fQ4WnDnq1V9j57wNUbRZ4sPlrDY8FCQ7D+BdH9u4AploBvXY4meuSMz/
GfNlWIp1fC4ylPnMn/ukhtLe3imm7dZ96qlQvPeTE7uIu4VRdk1guKAzQxQESIHc
8WNcv7oBjJ8x63ye7COKfmhYacKPqpUqfKX34JTLFEOZWHsSEOvmw9XWP2USQaVo
ab6jVipDkrNSIV97TCSZRFZlJYSgNVC7ucWaKQqoKjy660iflqjKypTh1PR3530o
DC/KSHoMl2vbbpWWh6nyls23uq4/m9qS+xUmVltG
=zRQZ
-----END PGP SIGNATURE-----

« Back