From 90b6fae5be01567e16bf1d950ab365d7642af922f2219a124f4a44d7fdbed1f6 Mon Sep 17 00:00:00 2001
From: Nicholas Johnson <>
Date: Mon, 10 Aug 2026 00:00:00 +0000
Subject: New entry: statement-of-signify-key-transition

---
 .../entry/statement-of-signify-key-transition.md   | 45 ++++++++++++++++++++++
 1 file changed, 45 insertions(+)
 create mode 100644 content/entry/statement-of-signify-key-transition.md

(limited to 'content/entry/statement-of-signify-key-transition.md')

diff --git a/content/entry/statement-of-signify-key-transition.md b/content/entry/statement-of-signify-key-transition.md
new file mode 100644
index 0000000..2f75f08
--- /dev/null
+++ b/content/entry/statement-of-signify-key-transition.md
@@ -0,0 +1,45 @@
+---
+title: "Statement of Signify Key Transition"
+date: 2026-08-10T00:00:00
+draft: false
+---
+Date: 2026-08-10
+
+Statement of Signify Key Transition
+
+To replace my Signify key, I have set up a new post-quantum SSH key.
+
+This message is signed by both keys to certify the transition.
+
+My old Signify key is:
+
+```plaintext
+RWTJ8JZMFWhB2Ya9GyXbmOQKSxd/x57IV/oNo6/nl344CR1aqf/OgPXf
+```
+
+My new post-quantum SSH key fingerprint is:
+
+```plaintext
+SHA256:nickq1NBXN7qL2st6yfUcYgrhtqo13cl8ht/3FvtbJ4
+```
+
+You can verify this transition statement with my old Signify key like this:
+
+```sh
+signify -V -p signify.pub -m signify-pq-ssh-transition-statement.txt -x signify-pq-ssh-transition-statement-signify.sig
+```
+
+You can verify this transition statement with my new post-quantum SSH key like this:
+
+```sh
+echo "nicholas $(cat signing-key_mldsa44_ed25519.pub)" > allowed_signers
+ssh-keygen -Y verify -f allowed_signers -I "nicholas" -n journal -s signify-pq-ssh-transition-statement-pq-ssh.sig < signify-pq-ssh-transition-statement.txt
+```
+
+Find the required files below:
+
+* [signify.pub](/static/signify.pub)
+* [signing-key_mldsa44_ed25519.pub](/static/signing-key_mldsa44_ed25519.pub)
+* [signify-pq-ssh-transition-statement.txt](/static/signify-pq-ssh-transition-statement.txt)
+* [signify-pq-ssh-transition-statement-signify.sig](/static/signify-pq-ssh-transition-statement-signify.sig)
+* [signify-pq-ssh-transition-statement-pq-ssh.sig](/static/signify-pq-ssh-transition-statement-pq-ssh.sig)
-- 
cgit v1.2.3