My Keys

1. My Keys
1.1. Cross-signed
2. Usage
2.1. Signing
2.2. Verifying Signatures
3. See also

tropf

ABSTRACT

list of my keys and short usage

1. My Keys

I use SSH keys to sign stuff if I need to. The following keys are mine:

Name Note Valid Since Link Full Text
tropf.pub default key 2025 download sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIHL3Z0DzGWSReXu23pWZtyxthxT/7kvFok486aAqQXkGAAAABHNzaDo=
tropf_secondary.pub backup key 2025 download sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIIw1Ay9FOHoRrdU2GGlkVxWl/6HkTGvVC0E3Qhw8axGCAAAABHNzaDo=

By default, you will encounter tropf.pub; however in case I ever lose it the backup key is equally valid as a replacement.

1.1. Cross-signed

This table lists signatures of keys on each other. Download the signatures using the links in the table, the referenced keys can be retrieved above. Additional keys may appear here to establish their authenticity.

Signing Key Signed Key Signature
tropf.pub tropf_secondary.pub tropf_secondary.pub.sig
tropf_secondary.pub tropf.pub tropf.pub.sig

2. Usage

2.1. Signing

To sign a file FILE with the SSH key KEY use the following command:

ssh-keygen -Y sign -f KEY -n file FILE

The result will be written into file.name.sig.

› The argument file is the so-called "namespace". It is hard-coded and does not refer to any specific file.

2.2. Verifying Signatures

Use this command to validate that the public key KEY.pub created the signature FILE.sig for the file FILE:

ssh-keygen -Y check-novalidate -f KEY.pub -n file -s FILE.sig < FILE

There are two commands in ssh-keygen to check signatures. As verify requires a key database (an extra file with its own format) prefer check-novalidate which only validates a signature against exactly one key.

3. See also


16 February 2025
Home