Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 6 additions & 3 deletions content/Software_Projects/Software_Signing.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -5,9 +5,12 @@ We use three different techniques to achieve this.

=== OpenPGP Software Signing

Source code releases are usually signed by an OpenPGP key of one of
Yubico's developers. Some ZIP files containing Windows executables are
also signed using OpenPGP.
Source code releases are usually signed by an OpenPGP key of one of Yubico's developers or the centrally managed OpenPGP key. Some ZIP files containing Windows executables are also signed using OpenPGP.

Yubico's centrally managed OpenPGP key:

-[PROD] Yubico Scribe GPG Signing Key <security+signing@yubico.com>
link:https://keys.openpgp.org/search?q=2D5641876C74EC9CB8A6FF43062BC0D272DC7CB1[`2D56 4187 6C74 EC9C B8A6 FF43 062B C0D2 72DC 7CB1`]

Following are the keys for Yubico developers who are currently releasing code.

Expand Down