I changed my OpenPGP keys
The keyset(not OpenPGP vocabulary I know) I had before was becoming quite a mess, I had lost my subkeys quite often or sometimes they were not reachable (available on desktop but being on the laptop for few weeks and the desktop is ~200 km away).
This keyset should be quite state of the art for late-2017.
- Generated on my air-gapped A20-OLinuXino-LIME2 (Running on Gentoo Hardened but with a non-GrSecurity kernel as it doesn’t support arm else than arm64)
- I have quite the hardened GnuPG setup (thanks to quite a lot of people) see my dotfiles (even if they are quite outdated)
- Stored on encrypted storage from 2017-12-11 (it’s creation) to 2018-01-11 where it’s now stored on my Nitrokey start
Terminal output with some modifications so I’m sure I don’t leak stuff.
$ gpg -K
/mnt/gentoo/home/haelwenn/.gnupg/pubring.gpg
--------------------------------------------
sec rsa2048/0xC87384794BBEBBAD 2014-03-15 [SC] [expires: 2018-06-09]
Key fingerprint = 8E4B AA5E E6FB D5A8 D04F 3BE5 C873 8479 4BBE BBAD
uid [ultimate] Haelwenn Monnier (lanodan, forwarded)
uid [ultimate] Haelwenn Monnier (lanodan)
uid [ultimate] Haelwenn Monnier (lanodan)
uid [ultimate] lanodan
uid [ultimate] Haelwenn Monnier (lanodan)
uid [ultimate] Haelwenn [elwenn] (OStatus)
uid [ultimate] Haelwenn[elwenn] Monnier (Friendica;Ostatus;Diaspora)
ssb elg4096/0x5FD41C2FFDDC88D7 2016-12-16 [E] [expires: 2018-06-09]
ssb rsa4096/0x01969693A30C8732 2016-12-16 [S] [expires: 2018-06-09]
sec# ed25519/0x90D93ACCFEFF61AE 2017-12-11 [C] [expires: 2018-06-09]
Key fingerprint = DDC9 237C 14CF 6F4D D847 F6B3 90D9 3ACC FEFF 61AE
uid [ full ] Haelwenn Monnier (lanodan; 2nd key)
ssb> ed25519/0xD5B7A8E43C997DEE 2017-12-11 [S] [expires: 2018-06-09]
ssb> cv25519/0x473C9CA78949B492 2017-12-11 [E] [expires: 2018-06-09]
$ gpg --card-status
Version ..........: 2.0
Name of cardholder: Haelwenn Monnier
Language prefs ...: [not set]
Sex ..............: unspecified
URL of public key : https://hacktivis.me/key.asc
Login data .......: [not set]
Signature PIN ....: forced
Key attributes ...: ed25519 cv25519 ed25519
Max. PIN lengths .: 127 127 127
PIN retry counter : 3 3 3
Signature counter : 0
Signature key ....: F85B DC63 FD9B 4AF4 4BF6 B812 D5B7 A8E4 3C99 7DEE
created ....: 2017-12-11 12:36:31
Encryption key....: 2DBA EF5E F602 78FE 28CE F33B 473C 9CA7 8949 B492
created ....: 2017-12-11 12:37:04
Authentication key: F85B DC63 FD9B 4AF4 4BF6 B812 D5B7 A8E4 3C99 7DEE
created ....: 2017-12-11 12:36:31
General key info..: sub ed25519/0xD5B7A8E43C997DEE 2017-12-11 Haelwenn Monnier (lanodan; 2nd key)
sec# ed25519/0x90D93ACCFEFF61AE created: 2017-12-11 expires: 2018-06-09
ssb> ed25519/0xD5B7A8E43C997DEE created: 2017-12-11 expires: 2018-06-09
card-no: FFFE 67082019
ssb> cv25519/0x473C9CA78949B492 created: 2017-12-11 expires: 2018-06-09
card-no: FFFE 67082019
Also I have moved my previous public key to https://hacktivis.me/oldkey.asc so the current one stays at https://hacktivis.me/key.asc.
To verify this is I have detached-signed this file with my old key and my current key.