OpenPGP key transition statement

transition.txt

Date: 08 September 2021

Over the last decade I have been trying to grasp over what OpenPGP and GnuPG
actually are. I was not sure about how’s and why’s of the technology, which is
why I have accumulated a lot of various OpenPGP keys. Some of them are too
small, some are long expired, some have weak passwords, and some are completely
inaccessible.

In order not to confuse other people and to finally establish my online
identity, I have set up a new OpenPGP key. From now on, this will be my primary
key, and I will be transitioning my old ones.

All the old keys mentioned here will be set to expire on 01 January 2022.
I strongly request anyone wanting to contact me to use my new key. I would also
like my new key to be re-integrated into the web of trust.

To certify the transition, this message is signed using (almost; see note) every
one of my old keys as well as the new key.


The old keys, sorted by their age (oldest first):

    pub   rsa4096/0x5B7BB75B9D6A32FE 2019-02-15
          Key fingerprint = 9BC6 68B5 0C4F 0168 F5DB  2D7F 5B7B B75B 9D6A 32FE

    pub   rsa4096/0x82869D5D93513BF3 2019-06-02
          Key fingerprint = BCE9 83A5 624C 7BD6 7591  21FE 8286 9D5D 9351 3BF3

    pub   rsa4096/0xD95250FB583B9F75 2019-08-10
          Key fingerprint = 2935 4AD3 C92B C970 3064  4E54 D952 50FB 583B 9F75

    pub   rsa4096/0x047EAE0E4512E127 2019-12-11
          Key fingerprint = 1A89 AF72 B3B8 C06F 967E  9AAB 047E AE0E 4512 E127
              Note: This key was revoked before transition and couldn’t be used
                    for signing

    pub   rsa4096/0xE40DFE6E993540FF 2019-12-12
          Key fingerprint = 3CC5 EA53 F4DF EFCA 568C  41A0 E40D FE6E 9935 40FF

    pub   rsa2048/0xEA4E7DECEEA050E4 2021-01-01
          Key fingerprint = 6A4E 43C0 8F65 D6DA 8945  BFA2 EA4E 7DEC EEA0 50E4

The new key:

    pub   rsa4096/0xF0A49E6D84E6EEBE 2021-07-11
          Key fingerprint = D836 4910 9830 AF99 BD41  C9D2 F0A4 9E6D 84E6 EEBE

Note that only the certifying subkeys are mentioned.


I have also decided for a keyserver to host my keys at. From now on, every
update of my primary key will be published on keys.openpgp.org. To fetch my new
primary key, you can simply execute:

    gpg --keyserver keys.openpgp.org --recv-key 0xF0A49E6D84E6EEBE

You can check the signature on this document by running:

    gpg --check-sigs 0xF0A49E6D84E6EEBE

For extra security, you can compare the fingerprint of the new key with the one
listed above:

    gpg --fingerprint 0xF0A49E6D84E6EEBE

If you are satisfied that you’ve got the right key, and the UIDs match what you
expect, I’d appreciate it if you would sign my key. You can issue a local-only 
signature with `--lsign-key` or a public signature with `--sign-key`. If you
do the latter, I’d like to have the key sent my way via e-mail. For this, use
the address of the primary UID.


Please let me know if you have any questions, or problems. I apologize for the
inconvenience.

Nikita Karamov <[email protected]>

transition.txt.sig

-----BEGIN PGP SIGNATURE-----
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=k+Uk
-----END PGP SIGNATURE-----

You can verify this transition statement by doing the following:

1. Get the old public keys from NickKaramoff/openpgp and import them:

   $ git clone --depth=1 https://github.com/NickKaramoff/openpgp .
   Cloning into '.'...
   remote: Enumerating objects: 10, done.
   remote: Counting objects: 100% (10/10), done.
   remote: Compressing objects: 100% (10/10), done.
   remote: Total 10 (delta 0), reused 9 (delta 0), pack-reused 0
   Unpacking objects: 100% (10/10), done.
   
   $ gpg --import *.asc
   gpg: key 047EAE0E4512E127: public key "Nikita Karamov <[email protected]>" imported
   gpg: key 5B7BB75B9D6A32FE: public key "Nikita Karamov <[email protected]>" imported
   gpg: key 82869D5D93513BF3: public key "Nikita Karamov <[email protected]>" imported
   gpg: key D95250FB583B9F75: public key "Nikita Karamov (nick-imac) <[email protected]>" imported
   gpg: key E40DFE6E993540FF: public key "Nikita Karamov <[email protected]>" imported
   gpg: key EA4E7DECEEA050E4: public key "Nikita Karamov <[email protected]>" imported
   gpg: Total number processed: 6
   gpg:               imported: 6

2. Get my latest public key from the keyserver:

   $ gpg --keyserver keys.openpgp.org --recv-key 0xF0A49E6D84E6EEBE
   gpg: key F0A49E6D84E6EEBE: public key "Nikita Karamov <[email protected]>" imported
   gpg: Total number processed: 1
   gpg:               imported: 1

3. Download the transition statement:

   wget 'https://gist.github.com/NickKaramoff/a08dd3656c302c59e0fcf8d567f86cb2/raw/eb6b8304dfb14eddc613c26f898281d25519b6b8/transition.txt' 'https://gist.github.com/NickKaramoff/a08dd3656c302c59e0fcf8d567f86cb2/raw/eb6b8304dfb14eddc613c26f898281d25519b6b8/transition.txt.sig'

4. Verify the signatures:

   $ gpg --verify transition.txt.sig transition.txt
   gpg: Signature made Wed 08 Sep 2021 14:28:54 MSK
   gpg:                using RSA key 9BC668B50C4F0168F5DB2D7F5B7BB75B9D6A32FE
   gpg: Good signature from "Nikita Karamov <[email protected]>" [unknown]
   gpg: WARNING: This key is not certified with a trusted signature!
   gpg:          There is no indication that the signature belongs to the owner.
   Primary key fingerprint: 9BC6 68B5 0C4F 0168 F5DB  2D7F 5B7B B75B 9D6A 32FE
   gpg: Signature made Wed 08 Sep 2021 14:28:55 MSK
   gpg:                using RSA key BCE983A5624C7BD6759121FE82869D5D93513BF3
   gpg: Good signature from "Nikita Karamov <[email protected]>" [unknown]
   gpg: WARNING: This key is not certified with a trusted signature!
   gpg:          There is no indication that the signature belongs to the owner.
   Primary key fingerprint: BCE9 83A5 624C 7BD6 7591  21FE 8286 9D5D 9351 3BF3
   gpg: Signature made Wed 08 Sep 2021 14:28:55 MSK
   gpg:                using RSA key 29354AD3C92BC97030644E54D95250FB583B9F75
   gpg: Good signature from "Nikita Karamov (nick-imac) <[email protected]>" [unknown]
   gpg: WARNING: This key is not certified with a trusted signature!
   gpg:          There is no indication that the signature belongs to the owner.
   Primary key fingerprint: 2935 4AD3 C92B C970 3064  4E54 D952 50FB 583B 9F75
   gpg: Signature made Wed 08 Sep 2021 14:28:55 MSK
   gpg:                using RSA key 0DDF9AF0BCD99D21E94D52DB059BC559AA9AAAD7
   gpg: Good signature from "Nikita Karamov <[email protected]>" [unknown]
   gpg:                 aka "Nikita Karamov (TU Braunschweig) <[email protected]>" [unknown]
   gpg:                 aka "Nikita Karamov <[email protected]>" [unknown]
   gpg:                 aka "Nikita Karamov (TU Braunschweig) <[email protected]>" [unknown]
   gpg: WARNING: This key is not certified with a trusted signature!
   gpg:          There is no indication that the signature belongs to the owner.
   Primary key fingerprint: 3CC5 EA53 F4DF EFCA 568C  41A0 E40D FE6E 9935 40FF
        Subkey fingerprint: 0DDF 9AF0 BCD9 9D21 E94D  52DB 059B C559 AA9A AAD7
   gpg: Signature made Wed 08 Sep 2021 14:28:55 MSK
   gpg:                using RSA key 6A4E43C08F65D6DA8945BFA2EA4E7DECEEA050E4
   gpg: Good signature from "Nikita Karamov <[email protected]>" [unknown]
   gpg:                 aka "Nikita Karamov (TU Braunschweig) <[email protected]>" [unknown]
   gpg:                 aka "Nikita Karamov <[email protected]>" [unknown]
   gpg:                 aka "Nikita Karamov (TU Braunschweig) <[email protected]>" [unknown]
   gpg: WARNING: This key is not certified with a trusted signature!
   gpg:          There is no indication that the signature belongs to the owner.
   Primary key fingerprint: 6A4E 43C0 8F65 D6DA 8945  BFA2 EA4E 7DEC EEA0 50E4
   gpg: Signature made Wed 08 Sep 2021 14:28:56 MSK
   gpg:                using RSA key B913BE1FDCD7F35DA4B922C17FCADEDBB1AEBE44
   gpg: Good signature from "Nikita Karamov <[email protected]>" [unknown]
   gpg:                 aka "Nikita Karamov <[email protected]>" [unknown]
   gpg:                 aka "Nikita Karamov <[email protected]>" [unknown]
   gpg: WARNING: This key is not certified with a trusted signature!
   gpg:          There is no indication that the signature belongs to the owner.
   Primary key fingerprint: D836 4910 9830 AF99 BD41  C9D2 F0A4 9E6D 84E6 EEBE
        Subkey fingerprint: B913 BE1F DCD7 F35D A4B9  22C1 7FCA DEDB B1AE BE44