CH-J Toolsserver management over SSH
Menu
All key examples →

Example 29 · V5 · ECDSA secp256k1 + ECDH NIST P-256

Version 5 key (LibrePGP): its own fingerprint of 64 hex digits and packet format, used by GnuPG 2.4 and newer. Not compatible with RFC 9580 V6 software such as Sequoia.

Key overview

Key versionV5
SpecificationLibrePGP draft-koch-librepgp-06
StatusActive draft, not an approved RFC
Primary key (certify, sign)ECDSA secp256k1 · ID 19 · SHA-256
Encryption subkeyECDH NIST P-256 · ID 18
Fingerprint0530EB20EA9EB87DE933D00F2414ADE2B910C90666AC2CB86B896BD7F1440639
Passphrase of the private keysynthetic-key-password

Algorithms and use

ECDSA secp256k1: Elliptic-curve signature on secp256k1, the curve known from Bitcoin. It is outside the RFC 9580 curve registry: GnuPG supports it, while Sequoia-based software, including the keys2 keyserver, rejects it. Use it only for compatibility with systems that need this curve.

ECDH NIST P-256: Elliptic-curve Diffie-Hellman encryption subkey on NIST P-256.

Public key

The public certificate with the primary key, the encryption subkey and their binding signatures. Import it to verify signatures or to encrypt to this test identity.

Download → 770 bytes

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=oP0P
-----END PGP PUBLIC KEY BLOCK-----

Private key

The private key, protected with the passphrase shown above. Published for testing only: anyone can use it.

Download → 1 008 bytes

Show
-----BEGIN PGP PRIVATE KEY BLOCK-----
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=N5qT
-----END PGP PRIVATE KEY BLOCK-----

Revocation certificate

A pre-generated revocation certificate. Importing it marks the key as revoked; it is published so you can test how software handles revoked keys.

Download → 945 bytes

Show
-----BEGIN PGP PUBLIC KEY BLOCK-----
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=RMc+
-----END PGP PUBLIC KEY BLOCK-----

Signature of test_1MB.bin

Detached ASCII-armored signature of test_1MB.bin made with this key in CH-J Tools. Save it as test_1MB.bin.asc next to the test file.

Download → 244 bytes

-----BEGIN PGP SIGNATURE-----

woEFABMIACkFAmr3jvMiIQUFMOsg6p64fekz0A8kFK3iuRDJBmasLLhriWvX8UQG
OQAKCRAFMOsg6p64fRluAP9xDtuD4qFu04QEC8Bk7NdQCI6IIaPxx6eLZDGmEP8p
jwD+NjjkJN/AHRDAhy8MIyMQewtw8+k85Aqb3LuV4YNwW/Y=
=iLsm
-----END PGP SIGNATURE-----

Verify the signature

Version 5 keys need GnuPG 2.4 or newer, or CH-J Tools. Use a temporary GNUPGHOME so the test key does not enter your real keyring:

gpg --import pgp-example-29-public.asc
gpg --verify test_1MB.bin.asc test_1MB.bin

Download test_1MB.bin →