1
English type: Plain text
[[!meta title="OpenPGP keys"]]
32/310 · 31
2
English type: Plain text
Tails developers maintain several OpenPGP key pairs.
72/520 · 52
5
English type: Plain text
<p>For example, if you first [[authenticate the Tails signing key
through the OpenPGP Web of Trust|install/download#wot]], then
you can verify our others keys as they are all certified by the Tails
signing key.</p>
252/2150 · 215
9
English type: Title =
Signing key
17/110 · 11
10
English type: Title -
Purpose
8/100 · 7
11
English type: Plain text
This key only has the capability to sign and certify: it has no encryption subkey.
91/820 · 82
12
English type: Plain text
Its only purpose is:
24/200 · 20
14
English type: Bullet: '- '
To certify other cryptographic public keys needed for Tails development
97/710 · 71
15
English type: Title -
Policy
8/100 · 6
16
English type: Plain text
The secret key material will never be stored on an online server or on systems managed by anyone other than Tails core developers.
168/1300 · 130
17
English type: Title ###
Primary key
13/110 · 11
18
English type: Bullet: '- '
Is not owned in a usable format by any single individual. It is split cryptographically using [gfshare](https://tracker.debian.org/pkg/libgfshare).
153/1470 · 147
19
English type: Bullet: '- '
Is only used offline, in an air-gapped Tails only communicating with the outside world through:
105/950 · 95
20
English type: Bullet: ' * '
Plugging the Tails flash media in another operating system to install Tails in the first place.
99/950 · 95
21
English type: Bullet: ' * '
Plugging other removable media in the air-gapped Tails to send the public key, secret key stubs, parts of the secret master key, and so on to the outside world.
185/1600 · 160
22
English type: Bullet: ' * '
Plugging other removable media in the air-gapped Tails to receive Debian packages, public keys, and so on from the outside world.
131/1290 · 129
23
English type: Bullet: '- '
Expires in less than one year. We will extend its validity as many times as we find reasonable.
92/950 · 95
24
English type: Bullet: '- '
Has a revocation certificate split amongst different people. See the [[details of the mechanism|signing_key_revocation]].
124/1220 · 122
25
English type: Title ###
Signing subkeys
21/150 · 15
26
English type: Bullet: '- '
Stored on OpenPGP smartcards owned by those who need them. Smartcards ensure that the cryptographic operations are done on the smartcard itself and that the secret cryptographic material is not directly available to the operating system using it.
300/2470 · 247