[IMPORTANT] New Red Hat Product Security OpenPGP key

Security announcements for all Red Hat products and services. rhsa-announce at redhat.com
Tue May 15 17:10:08 UTC 2018


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Date: Tuesday, May 15th 2018

Red Hat Product Security has transistioned from using its old 1024-bit
DSA OpenPGP key to a new 4096-bit RSA OpenPGP key.  This was done to
improve the long-term security of our communications with our customers
and also to meet current key recommendations from NIST[0].

The old key will continue to be valid for some time, but it is prefered
that all future correspondence use the new key.  Replies and new
messages either signed or encrypted by Product Security will use this
new key.

The old key was:

pub   1024D/0x5E548083650D5882 2001-11-21
      Key fingerprint = 92732337E5AD3417526564AB5E548083650D5882

And the new key is:

pub   4096R/0xDCE3823597F5EAC4 2017-10-31
      Key fingerprint = 77E79ABE93673533ED09EBE2DCE3823597F5EAC4

To fetch the full key from a public key server, you can simply do:

  gpg --keyserver keys.fedoraproject.org --recv-key \
    '77E79ABE93673533ED09EBE2DCE3823597F5EAC4'

If you already know the old key, you can now verify that the new key is
signed by the old one:

  gpg --check-sigs '77E79ABE93673533ED09EBE2DCE3823597F5EAC4'

You may also import the public key as listed here:

- -----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=Yp+7
- -----END PGP PUBLIC KEY BLOCK-----


If you are satisfied that you've got the right key, and the UIDs match
what you expect, you may import and begin using the new key when
communicating with us at secalert at redhat.com.

Please let me know if you have any questions or problems, and sorry for
any inconvenience.

Fabio Olive Leite
Red Hat Product Security

[0] NIST SP 800-57 Pt. 1 Rev. 4 and NISP SP 800-131A Rev. 1
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iD8DBQFa+xJGXlSAg2UNWIIRAn/WAKC09ZTuqELUMt43QGLxTD5+zGR6ugCfXLes
upLRnHFbs7KBKf5E8fNHp0Y=
=uGiq
-----END PGP SIGNATURE-----




More information about the RHSA-announce mailing list