Revoking key
Werner Koch
wk@gnupg.org
Thu, 20 Jul 2000 18:39:08 +0200
On Thu, 20 Jul 2000, André Dahlqvist wrote:
> Another reason is that I have gotten the impression from the GnuPG
> changelog that decryption is faster with keys generated with v1.0.2, ir
> this correct? The key I want to revoke has been spread to keyservers.
Yes. But, all you have to do is to revoke the subkey which is used
for encryption. The primary (DSA) keys stays and with it all your key
signatures.
1. --edit-key your_key
2. "addkey"
create a new encryption only key
3. select your old subkey ("key 1")
4. "revkey"
and you have revoked your old key.
The old key will still stay in your keyring but it will never be used
for encryption anymore. However, you can still decrypt messages
encrypted for the old key.
Werner
--
Werner Koch OpenPGP key 621CC013
OpenIT GmbH http://www.OpenIT.de