Upgrading keys to larger than 1024

Daniel Kahn Gillmor dkg at fifthhorseman.net
Tue Sep 10 20:29:51 CEST 2013


On 09/10/2013 12:47 PM, AdamC wrote:
> I have keys that I have used (sparingly) since 2004. This is a 1024
> keysize. That keypair has a few signatures through key signing.
> 
> What is the best approach to upgrading keys to 4096? Is it just create a
> new keypair and then go to lots of key signing events again (pain), or is
> there a way to do this with my current keys?

There's no way to directly upgrade if your primary key is weaker than
you'd like.

You should create a new keypair and go out in the world and meet people
who will sign your key.  it doesn't have to be a pain :)

Ana wrote up some good suggestions about how to do a key transition:

  http://ekaia.org/blog/2009/05/10/creating-new-gpgkey/

Regards,

	--dkg

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 1027 bytes
Desc: OpenPGP digital signature
URL: </pipermail/attachments/20130910/321a2ec6/attachment.sig>


More information about the Gnupg-users mailing list