Re: [Tails-dev] An amusing tale of indeterminism

14/11/12 18:26, maioral wrote:
> i downloaded a new tails sign key from your site and size is different,
> as verification also is
>
> sha256sum tails-signing*.key
> d94ca0efd92a60bce1015112b29b319250772c90e3172d3d9c99c7c0e88ac3c8
> tails-signing14.key
> 79f1663dfb5609aaa5021221e01ff38c7d3d5bbd8126710ce385f6009cd501f7
> tails-signing.key
>
> the 14.key was downloaded today

A GnuPG key can change (with or without changing in size) for many
reasons: new signatures, new user-ids, new sub-keys, modified key
expiration dates etc. The only thing that matters is that the key
fingerprint remains the same.

Cheers!