Thanks for noticing that. My PGP key fingerprints are:
Ed25519 (and also, Curve25519 encryption) can be used with
GnuPG 2.1+, based on a
draft standard and
just using a number which
bureaucracy has not assigned. It is supported by some others (including
Keybase—
n.b. that my profile there is way out of date, since their interface is horrible if you don’t give them your keys). I am
not alone in wishing for Ed448-Goldilocks. Too bad. As a pseudonymous personality, my Ed25519
fingerprint is me.
Due to spotty support otherwise, I have been maintaining an RSA key (4096 bits, of course). It feels like the 90s, when Usenet signature sported fingerprints for PGP 2.x/5.x keys.
I will not be pasting the keys themselves into a message here. That’s not the right way to do things, if the tedium I’ve spent trying to gather keys is any indicator! Fingerprints will suffice. PGP fingerprints have a 2
160 security level, and will not go out of date as subkeys and userids change.
My aforestated fingerprints are for certification-only primary keys which were generated on an airgap machine, have never been exposed to a net-connected machine, and never expire. (`man gpg` and search for --export-secret-subkeys. Lazyweb also has blog guides for how to do this.) I use those to add, revoke, and/or extend the expiry of subkeys, as well as changing userids as needed. Some of my subkeys expire next month—no big deal; I’ll either
extend their expiration dates (yes, you can do that!), or issue replacements if I want to. People can then refresh my keys from keyservers, relying on the fingerprint and primary key they already have.
I have (much) more to say about PGP keys. Since I found this thread, I’ve been trying to gather and organize keys; I am contemplating a project to make a
Bitcoin Forum PGP Keyring. I will post again later, or start a new thread if warranted. Promoting PGP usage on the forum is a special interest of mine:
This is why I think user education is important. For a forum dealing with what is now colloquially called “crypto”, only an astonishly small proportion of users are crypto-savvy.
One of my first thoughts on seeing anything Bitcoin-related is, “Why isn’t public-key crypto used for all authentication?” Of all places, the Bitcoin Forum should lead with that! If you use Bitcoin, you should also use PGP, at the bare minimum; and the attention brought by Bitcoin makes for an opportunity to introduce more people to what old cypherpunks call “crypto”, resulting in more security all-around.