KEY · OPENPGP · WKD

key.

The OpenPGP key served from this domain is the identity. Not the bio. Not the feed.

Keyserver

Retrieve the key by long Key ID (0x3C5BB56F6C1356B2) from keys.openpgp.org, without needing the mailbox on this page.

gpg --keyserver keys.openpgp.org \
      --recv-keys 3C5BB56F6C1356B2

Web Key Directory

Direct method on cyphertux.net. Clients that already know the mailbox can locate the key through WKD.

Fingerprint

F462 C0A0 5552 D956 6948
EE6C 3C5B B56F 6C13 56B2

Verify the fingerprint after retrieval.

Created 2026-09-16 · ed25519 [SC] + cv25519 [E] · no expiry, rotations announced on /key

Signed identity

The domain identity is also published as a clearsigned statement. identity.txt is signed by the OpenPGP key presented on this page.

gpg --verify identity.txt

Bitcoin

btc@cyphertux.net

BIP-353 human-readable Bitcoin address. DNSSEC resolves it to a Bitcoin instruction that contains a BIP-352 Silent Payment address. Resolve the identifier; do not trust a pasted payment string from elsewhere.

Verify the domain

  1. Fetch the key from this domain via https://cyphertux.net/pgp.txt or WKD (https://cyphertux.net/.well-known/openpgpkey/hu/dj3498u4hyyarh35rkjfnghbjxug6b19). Same fingerprint either way.
  2. Compare the fingerprint to the value on this page.
  3. Confirm the UID on the retrieved key and that discovery hits this domain, not a mirror you did not choose.

Write encrypted

  1. Import the public key (file or WKD locate).
  2. Encrypt to that key’s UID with the fingerprint above.
  3. Send with any MUA that can deliver OpenPGP mail to that UID. Matrix is fine for chat; mail is for sealed messages.

Not an identity

  • An X handle, even @Cyphertux
  • A screenshot of a chat, key, or this page
  • “We know each other” without a key check
  • A random DM from a lookalike account
  • Any key that is not served from cyphertux.net
root@cyphertux:~/shell