Replacing/updating my PGP key

I’ve decided that my PGP key could use some updating after 9 years. I have created a new (longer) and better-hashed PGP key. Now using 4096 bits of RSA, and using sha2 from now on 😉

And the new key is:

pub 4096R/C4F69BD2 2009-05-11 [expires: 2019-05-09]
Key fingerprint = 6AFC 0D83 5346 C729 6754 113F D867 4D8F C4F6 9BD2

I have placed the key on my server: http://www.maniac.nl/maniac.gpg and uploaded it to the pgp keyserver(s).

I have also created a transition document, which is signed by my old and new keys, located on http://www.maniac.nl/key-transition.txt. If you have signed my old key (0x357D2178) please consider re-signing my new key after verifying the signatures on this document.

If you prefer to meet me face-to-face for a key verification, that shouldn’t be too hard to arrange. I’ll try to keep some keyslips on my at all times.

Update 2009/05/18: The file was signed first with my old key, and the result was signed with my new key. This gave some problems, and the file is now replaced by a new version which is signed by both keys simultaniously. This should verify correctly.

curl -s http://www.maniac.nl/key-transition.txt | gpg –verify
gpg: Signature made Mon 18 May 2009 11:00:17 AM CEST using RSA key ID C4F69BD2
gpg: Good signature from “Mark M. Janssen <maniac@maniac.nl>”
gpg: aka “[jpeg image of size 1522]”
gpg: Signature made Mon 18 May 2009 11:00:17 AM CEST using DSA key ID 357D2178
gpg: Good signature from “Mark Janssen (Maniac) <maniac@maniac.nl>”
gpg: aka “Mark Janssen <maniac@maniac.nl>”
gpg: aka “Mark Janssen <markj@markjanssen.nl>”
gpg: aka “[jpeg image of size 1522]”

I have also updated the old key to expire on 2009/12/31

Write down: “09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0″

Yup… there’s been attempts at censoring / abolishing the above number from the intarwebs… It appears to be the HDDVD Processing key for all current released HDDVD’s. Thank goodness the DMCA doesn’t hold any ground outside of the US of A… If I receive any take-down notices, this could be fun :), as trade secrets are not secrets anymore, and have no legal protection.

Some interesting links:

Update: Freedom To Tinker.com has a nice view on the subject. And also some explanation for non-techies:

While it’s obvious why the creator of a movie or a song might deserve some special claim over the use of their creation, it’s hard to see why anyone should be able to pick a number at random and unilaterally declare ownership of it. There is nothing creative about this number — indeed, it was chosen by a method designed to ensure that the resulting number was in no way special. It’s just a number they picked out of a hat. And now they own it?
© Freedom To Tinker