I use OpenPGP signatures to verify commits, releases, and other material published by me.
The public key is available here: pgp-key.asc
Fingerprint
A05D A1B7 44C6 B6E2 49D3 8B82 FF2B 8A14 4E67 46CCKey details
Key ID: FF2B8A144E6746CC
Identities: Lokesh Kumar N. <hi@loke.sh>
Lokesh Kumar N. <lokesh@navikarana.io>
Primary key: Ed25519 (signing and certification)
Subkey: cv25519 (encryption)
Created: 22 October 2026
Expires: 21 October 2028Import the Key
curl -fsSL https://loke.sh/pgp-key.asc | gpg --importVerify the Imported Key
gpg --fingerprint FF2B8A144E6746CCAlways compare the full fingerprint when verifying the key.
Previous Key (Revoked)
My previous OpenPGP key was revoked on 22 October 2026 as a security precaution following a compromise of my development system. Although exposure of the private key has not been confirmed, it should no longer be trusted for new signatures or encrypted communication.
Key ID: 0774DA1C332BB561
Fingerprint: 1054 38C0 1953 F11A B9D1 F373 0774 DA1C 332B B561
Created: 12 August 2026
Status: RevokedThe revocation has been published to the OpenPGP keyserver network. The key listed above supersedes this previous key.