blob: 2f75f088294ceb069d43a2ce265d522647e2951e7f85160eff10973be4b0f3fc (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
|
---
title: "Statement of Signify Key Transition"
date: 2026-08-10T00:00:00
draft: false
---
Date: 2026-08-10
Statement of Signify Key Transition
To replace my Signify key, I have set up a new post-quantum SSH key.
This message is signed by both keys to certify the transition.
My old Signify key is:
```plaintext
RWTJ8JZMFWhB2Ya9GyXbmOQKSxd/x57IV/oNo6/nl344CR1aqf/OgPXf
```
My new post-quantum SSH key fingerprint is:
```plaintext
SHA256:nickq1NBXN7qL2st6yfUcYgrhtqo13cl8ht/3FvtbJ4
```
You can verify this transition statement with my old Signify key like this:
```sh
signify -V -p signify.pub -m signify-pq-ssh-transition-statement.txt -x signify-pq-ssh-transition-statement-signify.sig
```
You can verify this transition statement with my new post-quantum SSH key like this:
```sh
echo "nicholas $(cat signing-key_mldsa44_ed25519.pub)" > allowed_signers
ssh-keygen -Y verify -f allowed_signers -I "nicholas" -n journal -s signify-pq-ssh-transition-statement-pq-ssh.sig < signify-pq-ssh-transition-statement.txt
```
Find the required files below:
* [signify.pub](/static/signify.pub)
* [signing-key_mldsa44_ed25519.pub](/static/signing-key_mldsa44_ed25519.pub)
* [signify-pq-ssh-transition-statement.txt](/static/signify-pq-ssh-transition-statement.txt)
* [signify-pq-ssh-transition-statement-signify.sig](/static/signify-pq-ssh-transition-statement-signify.sig)
* [signify-pq-ssh-transition-statement-pq-ssh.sig](/static/signify-pq-ssh-transition-statement-pq-ssh.sig)
|
