I am transitioning GnuPG keys from an old 1024-bit key to a new 4096-bit key, because 1024 bit are uncomfortably close to what can be cracked. The old key will continue to be valid for some time, but I prefer all new correspondence to be encrypted in the new key, and will be making all signatures going forward with the new key.

If you have signed my old key, I would appreciate signatures on my new key as well, provided that your signing policy permits that without re-authenticating me.

The old key, which I am transitional away from, is:

pub   1024D/0x5647280A274D4F97 2007-11-27 [expires: 2014-09-30]
    Key fingerprint = 14DE 735E 198A 7419 FE51  D833 5647 280A 274D 4F97

The new key, to which I am transitioning, is:

pub   4096R/0x74DCA8A36C52F833 2014-03-30
    Key fingerprint = 7251 9DA2 D8BD 6F38 D4A1  199E 74DC A8A3 6C52 F833

To fetch the full new key, download it here or fetch it from a public key server using GnuPG by running:

gpg --keyserver pool.sks-keyservers.net --recv-key 0x74DCA8A36C52F833

If you have already validated my old key, you can then validate that the new key is signed by my old key:

gpg --check-sigs 0x74DCA8A36C52F833

This transition document is signed with both keys to validate the transition. If you want to verify the authenticity of the transition document yourself, run the following command on the file:

gpg --verify transition-2014-03.txt

If you then want to sign my new key, a simple and safe way to do that is by using caff (shipped in Debian as part of the “signing-party” package) as follows:

caff 0x74DCA8A36C52F833

Please contact me via e-mail if you have any questions about this transition. If you want to transition to a new key as well, you might find this guide helpful.