GPG Update 2026
A recent toot of mine got the response “friends don’t let friends use GPG” which,
I suppose, is true enough. It certainly isn’t the attestation-friendly thing to use,
and the opsec failures that are so easy with GPG-encrypted mail make it a hazard there.
But for some things it’s all we’ve got, and I do like to sign Calamares releases
and incidental FreeBSD things. And I am nominally the maintainer of the
security/gnupg port on FreeBSD. So gpg.fail notwithstanding,
here’s notes on my 2026 GPG key update.
Previously in 2024 and 2025 I wrote down basically the same things:
- Things expire in about 13 months and I’ll have to remember then again,
- You can find my pubkey published on my personal and business sites,
- FreeBSD signature information is used rarely, but is available in the FreeBSD developers OpenPGP keys list,
- Codeberg will have signed commits in the Calamares repository with these keys.
sec rsa4096/0x7FEA3DA6169C77D6 2016-06-11 [SC] [expires: 2027-02-03]
Key fingerprint = 00AC D15E 25A7 9FEE 028B 0EE5 7FEA 3DA6 169C 77D6
uid [ultimate] Adriaan de Groot <groot@kde.org>
uid [ultimate] Adriaan de Groot <adriaan@bionicmutton.org>
uid [ultimate] Adriaan de Groot <adridg@freebsd.org>
uid [ultimate] Adriaan de Groot <adriaan@commonscaretakers.com>
ssb ed25519/0x55734316C0AE465B 2025-03-04 [S] [expires: 2026-08-26]
ssb cv25519/0x064A54E8D698F287 2025-03-04 [E] [expires: 2026-08-26]
ssb ed25519/0x14B6CC381BC256D6 2026-02-03 [S] [expires: 2027-02-28]
ssb cv25519/0xD716006BBA771051 2026-02-03 [E] [expires: 2027-02-28]