-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Sun, 27 Sep 2009 20:00:00 -0500

In light recent new attacks against SHA-1 [1,2], and the NIST guidance
on 1024 bit keys and SHA-1 hashes [3,4], I have decided to move to a new
OpenPGP key of a larger size. As such, I will slowly be transitioning
away from my old key.

My old key will continue to be valid for some time to come, but I'd
prefer all new correspondences to use the new one. I'll also be
switching to my new key for my outgoing signatures (email and code). For
this to work well, I'd like my new key to be re-integrated into the web
of trust. I've signed this message with both the old and the new keys,
to certify the transition.

The old key was:

pub 1024D/E95EDDC9 2006-02-22
Key fingerprint = 4EBE 56CB 0EFE CBED 2A92 8D4F 7BD1 5207 E95E DDC9

And the new key is:

pub 10240R/4A11C97A 2009-09-23 [expires: 2019-09-21]
Key fingerprint = 4E46 9519 ED67 7734 268F BD95 8F7B F8FC 4A11 C97A

To fetch my new key from a public key server, you can simply do:

gpg --keyserver subkeys.pgp.net --recv-key 4A11C97A

If you already know my old key, you can now verify that the new key is
signed by the old one:

gpg --check-sigs 4A11C97A

If you don't already know my old key, or you just want to be double
extra paranoid, you can check the fingerprint against the one above:

gpg --fingerprint 4A11C97A

If you are satisfied that you've got the right key, and the UIDs match
what you expect, I'd greatly appreciate it if you would sign my key:

gpg --sign-key 4A11C97A

Lastly, if you could upload these signatures, I would appreciate it.
Could you please upload the signatures to a public keyserver directly:

gpg --keyserver subkeys.pgp.net --send-key 4A11C97A

If you prefer, you may also email me your signatures in an encrypted
mail to my new key to ensure that I really own the addresses[5] I claim
to own in with my UIDs (as done with the ``caff'' keysigning tool from
the ``signing-party'' Debian package).

Please let me know if there is any trouble, and sorry for the
inconvenience.

Thanks,
Ryan "ryanakca" Kavanagh

[1] http://eurocrypt2009rump.cr.yp.to/837a0a8086fa6ca714249409ddfae43d.pdf
[2] http://www.debian-administration.org/users/dkg/weblog/48
[3] http://csrc.nist.gov/groups/ST/hash/statement.html
[4] http://csrc.nist.gov/publications/nistpubs/800-57/SP800-57-Part1.pdf
[5] ryan@ryanak.ca uses my IPv6-only mailserver, ryanak.ca. If you do
not have access to an IPv6 mailserver, could you please upload that
UID's signature directly to a public keyserver.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
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=efnp
-----END PGP SIGNATURE-----