Thank you atom, Werner and Johan. I will create a RSA 2048 (sign only) key with RSA 4096 (encrypt) subkey. I understand that most recent PGP and all recent GPG can handle it. David