-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- ---
title: "New OpenPGP Key"
slug: "2018-new-openpgp-key"
date: 2018-08-11T17:28:51+01:00
tags: ["openpgp"]
- ---

After 5 years i thought it would be time for a new OpenPGP key. Also
i wanted to migrate to an offline master key and subkeys that are
stored on an OpenPGP smartcard.

My old key will continue to be valid for some time, but i prefer all
future correspondence to come to the new one. I would also like this
new key to be integrated into the web of trust.
[There is also a plaintext version of this message that is signed by
both keys to certify the transition.](https://bisco.org/notes/2018-new-openpgp-key/index.md.asc)

the old key was:
```
pub   rsa4096 2013-11-20 [SC] [expires: 2018-09-27]
      CBF53E306528F800E3AA4EAF32C61D34C09C6A34
```

And the new key is:
```
pub   rsa4096 2018-08-11 [C] [expires: 2020-08-10]
      C5BC7498F466D885188CB397CB06EA7B78DBE151
```

To fetch my new key from a public key server, you can simply do:

`gpg --recv-key C5BC7498F466D885188CB397CB06EA7B78DBE151`

If you already know my old key, you can now verify that the new key is
signed by the old one:

`gpg --check-sigs C5BC7498F466D885188CB397CB06EA7B78DBE151`

If you are satisfied that you've got the right key, and the UIDs match
what you expect, I'd appreciate it if you would sign my key:

`gpg --sign-key C5BC7498F466D885188CB397CB06EA7B78DBE151`

Lastly, if you could send me these signatures, i would appreciate it.

Please let me know if there is any trouble, and sorry for the
inconvenience.
-----BEGIN PGP SIGNATURE-----
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=3Zds
-----END PGP SIGNATURE-----