---
title: "Statement of Signify Key Transition"
date: 2026-08-10T00:00:00
draft: false
---
Date: 2026-08-10

Statement of Signify Key Transition

To replace my Signify key, I have set up a new post-quantum SSH key.

This message is signed by both keys to certify the transition.

My old Signify key is:

```plaintext
RWTJ8JZMFWhB2Ya9GyXbmOQKSxd/x57IV/oNo6/nl344CR1aqf/OgPXf
```

My new post-quantum SSH key fingerprint is:

```plaintext
SHA256:nickq1NBXN7qL2st6yfUcYgrhtqo13cl8ht/3FvtbJ4
```

You can verify this transition statement with my old Signify key like this:

```sh
signify -V -p signify.pub -m signify-pq-ssh-transition-statement.txt -x signify-pq-ssh-transition-statement-signify.sig
```

You can verify this transition statement with my new post-quantum SSH key like this:

```sh
echo "nicholas $(cat signing-key_mldsa44_ed25519.pub)" > allowed_signers
ssh-keygen -Y verify -f allowed_signers -I "nicholas" -n journal -s signify-pq-ssh-transition-statement-pq-ssh.sig < signify-pq-ssh-transition-statement.txt
```

Find the required files below:

* [signify.pub](/static/signify.pub)
* [signing-key_mldsa44_ed25519.pub](/static/signing-key_mldsa44_ed25519.pub)
* [signify-pq-ssh-transition-statement.txt](/static/signify-pq-ssh-transition-statement.txt)
* [signify-pq-ssh-transition-statement-signify.sig](/static/signify-pq-ssh-transition-statement-signify.sig)
* [signify-pq-ssh-transition-statement-pq-ssh.sig](/static/signify-pq-ssh-transition-statement-pq-ssh.sig)