Evilham.com

Public PGP key

Current PGP key

Obtaining the key

You can download it here or with the console:

# curl https://evilham.com/pgp.pubkey > evilham.pgp.pubkey

Or copy it and save it as evilham.pgp.pubkey

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=y0nA
-----END PGP PUBLIC KEY BLOCK-----

Or, if your software supports WKD you can discover the key using that.

Importing the key

#  gpg --import --with-fingerprint --with-subkey-fingerprint  < evilham.pgp.pubkey 
gpg: key EEB54CCC169ADE63: public key "Evilham " imported
gpg: Nombre total processat: 1
gpg:               importades: 1

Verifying the key

# gpg --list-keys --with-fingerprint --with-subkey-fingerprint contact@evilham.com
pub   ed25519 2022-01-01 [C] [expires: 2026-12-31]
      9AF0 A2A7 A20A D6A1 0353  1C4B EEB5 4CCC 169A DE63
uid           [ unknown] Evilham 
sub   ed25519 2022-01-01 [S] [expires: 2024-12-31]
      F1BE C17C AA58 1699 CB4C  F01B AE3E E30D 9708 86BF
sub   cv25519 2022-01-01 [E] [expires: 2024-12-31]
      0544 3D08 B029 F088 971E  B5BF C9A9 E94B 24B2 FFE1
sub   ed25519 2022-01-01 [A] [expires: 2024-12-31]
      62E7 13A9 275C 44C2 623D  551D A1FD D19F 1AE0 3301

History / changelog

Transition statement

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2022-01-01, I replaced my PGP key.

Previously used keys are still valid and not considered compromised but will
be phased out.

This text is signed by all those keys.


The LATEST key as of 2022-01-01 can be found with WKD if your client supports
it and it can also be found on
  https://evilham.com/pgp.2022.pubkey and is:

pub   ed25519/0xEEB54CCC169ADE63 2022-01-01 [C]
      Key fingerprint = 9AF0 A2A7 A20A D6A1 0353  1C4B EEB5 4CCC 169A DE63


The main key between 2019 and 2022 can be found on
  https://evilham.com/pgp.2019.pubkey and was:

pub   rsa4096/0xDC6EE0479C46403E 2019-07-26 [C]
      Key fingerprint = 2485 B041 FF48 9C92 1C81  D6BD DC6E E047 9C46 403E


The main key between 2016 and 2019 can be found on
  https://evilham.com/pgp.old.pubkey and was:

pub   rsa4096/0x55161BE60CE2CB87 2016-08-18 [SCA]
      Key fingerprint = B265 7ED4 5F7A DD90 7F1D  D5C7 5516 1BE6 0CE2 CB87
-----BEGIN PGP SIGNATURE-----
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=pZf/
-----END PGP SIGNATURE-----

Why the changes?

2019
Between 2016 and 2019 I learned a lot regarding computers in general, computer security and PGP (e.g. subkeys). It made sense to change to a more granulated key that is saved on a hardware token and protected by a password only I know.
2022
Between 2019 and 2022 life happened, I moved several times across countries and it looks like somehow the [C]ertification key got lost in the ether (working theory: I forgot it was ciphered on a USB stick I ended up using for something else \o/ moves are great to mess these things up). Long story short: those keys are set to expire in 2022-07-25, and I have no way of extending them :-D. So I got a new hardware token, did the whole dance again, and made frigging sure I have that [C]ertification key backed up where I can find it and not lose it.