diff options
Diffstat (limited to 'content/entry/statement-of-signify-key-transition.md')
| -rw-r--r-- | content/entry/statement-of-signify-key-transition.md | 45 |
1 files changed, 45 insertions, 0 deletions
diff --git a/content/entry/statement-of-signify-key-transition.md b/content/entry/statement-of-signify-key-transition.md new file mode 100644 index 0000000..2f75f08 --- /dev/null +++ b/content/entry/statement-of-signify-key-transition.md @@ -0,0 +1,45 @@ +--- +title: "Statement of Signify Key Transition" +date: 2026-08-10T00:00:00 +draft: false +--- +Date: 2026-08-10 + +Statement of Signify Key Transition + +To replace my Signify key, I have set up a new post-quantum SSH key. + +This message is signed by both keys to certify the transition. + +My old Signify key is: + +```plaintext +RWTJ8JZMFWhB2Ya9GyXbmOQKSxd/x57IV/oNo6/nl344CR1aqf/OgPXf +``` + +My new post-quantum SSH key fingerprint is: + +```plaintext +SHA256:nickq1NBXN7qL2st6yfUcYgrhtqo13cl8ht/3FvtbJ4 +``` + +You can verify this transition statement with my old Signify key like this: + +```sh +signify -V -p signify.pub -m signify-pq-ssh-transition-statement.txt -x signify-pq-ssh-transition-statement-signify.sig +``` + +You can verify this transition statement with my new post-quantum SSH key like this: + +```sh +echo "nicholas $(cat signing-key_mldsa44_ed25519.pub)" > allowed_signers +ssh-keygen -Y verify -f allowed_signers -I "nicholas" -n journal -s signify-pq-ssh-transition-statement-pq-ssh.sig < signify-pq-ssh-transition-statement.txt +``` + +Find the required files below: + +* [signify.pub](/static/signify.pub) +* [signing-key_mldsa44_ed25519.pub](/static/signing-key_mldsa44_ed25519.pub) +* [signify-pq-ssh-transition-statement.txt](/static/signify-pq-ssh-transition-statement.txt) +* [signify-pq-ssh-transition-statement-signify.sig](/static/signify-pq-ssh-transition-statement-signify.sig) +* [signify-pq-ssh-transition-statement-pq-ssh.sig](/static/signify-pq-ssh-transition-statement-pq-ssh.sig) |