diff --git a/content/Software_Projects/Software_Signing.adoc b/content/Software_Projects/Software_Signing.adoc index ee9298aa..3c99d825 100644 --- a/content/Software_Projects/Software_Signing.adoc +++ b/content/Software_Projects/Software_Signing.adoc @@ -5,9 +5,12 @@ We use three different techniques to achieve this. === OpenPGP Software Signing -Source code releases are usually signed by an OpenPGP key of one of -Yubico's developers. Some ZIP files containing Windows executables are -also signed using OpenPGP. +Source code releases are usually signed by an OpenPGP key of one of Yubico's developers or the centrally managed OpenPGP key. Some ZIP files containing Windows executables are also signed using OpenPGP. + +Yubico's centrally managed OpenPGP key: + +-[PROD] Yubico Scribe GPG Signing Key +link:https://keys.openpgp.org/search?q=2D5641876C74EC9CB8A6FF43062BC0D272DC7CB1[`2D56 4187 6C74 EC9C B8A6 FF43 062B C0D2 72DC 7CB1`] Following are the keys for Yubico developers who are currently releasing code.