GPG Intro & Keysigning Party « BSidesROC

GPG Intro & Keysigning Party

We will be doing an OpenPGP training and key signing party during the conference. Here’s how you can be involved:

If You Already Have A Key

Current PGP users, who already have a keypair and wish to participate in a keysigning during BSidesROC, should submit the fingerprints of any public keys they wish to be signed via email to [email protected] no later than Noon on Friday, April 22nd, 2016, the day before BSidesROC 2016.

Look for an email by midnight Friday containing a list of submitted fingerprint information and associated hashes. Confirm that your key fingerprint is listed correctly, and confirm the hashes.

We will attempt to use this list in the Zimmerman Sassaman key-signing protocol starting after lunch Saturday, April 23rd during BSidesROC. Please bring two forms of government-issued photo ID to the event and be prepared to show them to other participants. Use of any computing device during the keysigning is bad form, so please plan to keep them stashed away for the duration.

TL;DR Send your key fingerprint to [email protected]. That’s it. We will walk you through the rest.

If You’re New To PGP

Following the keysigning, those new to PGP are welcome to join us in an educational workshop. More practiced hands are welcome and encouraged to hang around to help. This workshop is intended to bring newcomers up-to-speed on the use of PGP software, the creation of keys, how to handle each part of an asymmetric key pair, and the role of keysignings and keypairs in building and maintaining webs of trust.

This will be a mixture of presentation and hands-on creation and use of small practice keys. At this stage, use of personal computing devices for practicing key generation, encryption, decryption, signing, and signature verification is encouraged.

Debian and Ubuntu will be the reference platforms of choice, and the strongly connected set the reference web of trust, but other OSes and smaller webs-of-trust will also be considered.