PGP keys

I now have separate PGP keys for work mail, personal mail and signatures. An ascii-armored file containing all my keys is also available from this server. A PGP signature of this page is here.

The fingerprints of my keys are as follows:

• My personal key, for private mail. This key will never use an additional decryption key (ADK). Key ID 0x384f0ba2:
  435f ecf5 002b fe50 4558 a2af ff71 b6c1 384f 0ba2.
• My work key, which may be escrowed with my employer or may utilise an ADK split amongst other people in the company, key ID 0x9ff974e0:
  eadc d3d6 3372 7189 0b38 9f28 19be bf0b 9ff9 74e0
• My signature key, it is not possible to encrypt to this key. As I am not able to decrypt anything encrypted to this key, it cannot be seized under the Government Access to Keys (GAK) powers within RIP. Key ID 0xa7cb7592:
  9c1c 2996 075b 2daa 3660 6d2f ee34 fc94 a7cb 7592
• My FaxYourMP.com key, I use this key for work I do associated with FaxYourMP.com, notably signing emails sent from owen@faxyourmp.com. Key ID 0x6e22d256:
  b3e8 fdd6 560a 6fb3 ad46 a266 ff3c a6ed 6e22 d256
• Finally, my RSA key, for backwards compatibility only, key ID 0x38fee6c3:
       7c41 e69c 5b8a 484d  22af 1859 f4c9 307b.

For more information about why I have changed my keys, read all about the UK Regulation of Investigatory Powers Act 2000. Good sources of information about RIP include Stand and The Foundation for Information Policy Research.

I will always be willing to explain why any key of mine has been revoked, unless it would be against the law for me to do so — the RIP Act 2000 makes it illegal to tell anyone if you have been served with certain kinds of warrants. I do promise, however, that any key of mine that is compromised will be revoked as soon as possible.

Keys of mine that are no longer valid include: the expired 0x7e3c8eab, 0xeaf31da4, 0x23bb060f and 0x00036874; key 0x76386580, which was revoked when RIP came into force, and 0x3e2056b9, which was revoked due to an error in the key's creation, which led to it being able to be used for ElGamal encryption, which defeated its purpose as a signature-only key.