Upgrading keys to larger than 1024

Daniel Kahn Gillmor dkg at fifthhorseman.net
Tue Sep 10 20:29:51 CEST 2013

On 09/10/2013 12:47 PM, AdamC wrote:
> I have keys that I have used (sparingly) since 2004. This is a 1024
> keysize. That keypair has a few signatures through key signing.
> What is the best approach to upgrading keys to 4096? Is it just create a
> new keypair and then go to lots of key signing events again (pain), or is
> there a way to do this with my current keys?

There's no way to directly upgrade if your primary key is weaker than
you'd like.

You should create a new keypair and go out in the world and meet people
who will sign your key.  it doesn't have to be a pain :)

Ana wrote up some good suggestions about how to do a key transition:




-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 1027 bytes
Desc: OpenPGP digital signature
URL: </pipermail/attachments/20130910/321a2ec6/attachment.sig>

More information about the Gnupg-users mailing list