After many years I’ve decided to give my local GnuPG key setup a refresh. It’s been nearly 10 years and a lot has changed in crypto land. I’ve also made a few mistakes back then with regards to hardware tokens back then. None of these have bitten me but I’ve still wanted to fix those for a long time.
So here it goes:
Transition signed with old key
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Key Transition Statement
=========================
I am transitioning my OpenPGP key from:
OLD: C4E02BA840483A5D6B7616076F203F0D220F8E98 (created 2017-01-15)
to:
NEW: 63DA8D5A011965AA711F7A4D2024D8DF11ADB9C4 (created 2026-08-22)
Please update your trust accordingly and sign the new key
if you had signed the old one.
-----BEGIN PGP SIGNATURE-----
iQJPBAEBCAA5FiEExOArqEBIOl1rdhYHbyA/DSIPjpgFAmqK3DMbFIAAAAAABAAO
bWFudTIsMi41KzEuMTIsMCwzAAoJEG8gPw0iD46Y9NwP/j7KQr5lI0C1gi1LvFQE
3Fg6S81OZaDqpBFDK7kOe/ykI7iw6AsW64Kr3extFxV+fAYMXlx86g2hHpqaXJLB
BDMFDYm6LJeRUsWwreUQdlsncu0uCmkU8/gc5XjFIsJCECyHgROF8pa6wrwffZeu
WQOJn9LI2dP0SWapWRU2rvBTXeFanokuwHzE3Yt+UlN96WMfeFfgku5Q8DBhJMnW
LD8s1IM40vgW68KRqaCqHZ1614H9UQSaRI93zgp3n5SsHnnqs6V8XoEAATnCBEj3
5BUysx+1hyFi/ftpxhIvWVX5Xu/ShydqasGj6nYOMte+QD8SM6YAcotkrdVebIKF
2XdnpAmlY1klxts7cv6zAARLwYuiTrONFNZglN31LhABkYITjrRffLNIuhtymzYr
XHrmKPfTvsBqHwwNJG6mLAimbq1WIhxO+TmZRADyUp0I2KM26bOfJQXFA4Svk3wE
v5NGhYwZhXQjZDxQV7aSBwr5Xbk5cB3RmwIA/7eFmObF+nt5oM6/rgw9AQsaHDZr
YynvfgrHoZaOna72FvfCPODO1tLpnQAr3EL6OV22IJn6a+VFfu5OlDy+LiS7rgF3
SdMSWW6kbouikJE1V4HYXkUitbIA4p2zBeebxRWiMqht07v1YklWjzpyI0DILdov
e/eGEzQNfDyxztGDAUcFH1hX
=QiW3
-----END PGP SIGNATURE-----
Transition signed with new key
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Key Transition Statement
=========================
I am transitioning my OpenPGP key from:
OLD: C4E02BA840483A5D6B7616076F203F0D220F8E98 (created 2017-01-15)
to:
NEW: 63DA8D5A011965AA711F7A4D2024D8DF11ADB9C4 (created 2026-08-22)
Please update your trust accordingly and sign the new key
if you had signed the old one.
-----BEGIN PGP SIGNATURE-----
iJEEARYIADkWIQS9Qu99lkBD8hYjEk69JBuKaXYGRAUCaorcYBsUgAAAAAAEAA5t
YW51MiwyLjUrMS4xMiwwLDMACgkQvSQbiml2BkT+zAD/d+/Bv2TtNoUOP3KH0lhy
VWGTsbyQtoj/BwyLfX9h71kA/ibPolC/L3Y0SPLxmWKDiJ4r5t9wZ8vWsV2kekyD
bbEJ
=E2CV
-----END PGP SIGNATURE-----
Do you want to give me feedback about this article in private? Please send it to comments@zerokspot.com.
Alternatively, this website also supports Webmentions. If you write a post on a blog that supports this technique, I should get notified about your link π