Signing keys

Joe Boll signs and timestamps his papers and documents, including his defensive publications, with the OpenPGP key below. Use it to check that a signed document came from him.

Stamp-signing key

• Key ID: A27F71AB1E015272
• Fingerprint: A008 A011 308E 8686 A8CC 7E5B A27F 71AB 1E01 5272
• Type: ed25519
• User ID: Joe Boll (stamp signing) <[email protected]>
• Created: 2026-11-12
• Use: signing and timestamping Joe's papers and documents
• Certified by Joe's long-standing Proton Mail key, fingerprint 049C D95E A09D 6316 F742 7974 6E14 7753 D3D1 935E

Download the public key with its Proton Mail certification (joe-stamp-public-certified.asc)

Other exports: joe-stamp-signing.pub.asc (the original export) and joe-stamp-signing.min.pub.asc (minimal export).

The key can also be fetched by email address through Web Key Directory: gpg --locate-keys [email protected]

Post-quantum signing keys

Quantum-resistant public keys (NIST FIPS 204 and FIPS 205), in PEM format.

• ML-DSA-65: joe-ml-dsa-65.pub.pem. SHA-256 of the DER public key: af7088f27a1aab6a3ddfc9d5573971d0e4e17eb57fa9a48ac8b82f6a9f5ae583
• SLH-DSA-SHA2-128s: joe-slh-dsa-sha2-128s.pub.pem. SHA-256 of the DER public key: fd62716e5ed1ae806359ccd64542e054417785eb61f972ee912c0d4b24918c17

PDF signing certificate

Joe signs PDFs with this self-signed X.509 certificate (ECDSA P-256). To trust his PDF signatures, compare the certificate's fingerprint with the one below.

• Subject: CN=Joe Boll, O=Joe Boll, [email protected], C=CA
• SHA-256 fingerprint: EE:A2:C9:C4:AF:28:4E:85:4E:67:A3:66:A7:D2:F9:5E:29:16:44:08:CA:88:7E:D8:2C:A9:C6:71:1F:68:9A:A1
• Serial: 4B59E82269B45D9D2E0A2DA2ADE9D37643562177
• Valid: 2026-11-12 to 2036-11-09 (UTC)

Download the certificate (joe-pdf-signing.crt)

Coexistence proof

All four signing keys above (OpenPGP, the PDF certificate, ML-DSA-65 and SLH-DSA-SHA2-128s) each signed the same statement naming the others. That shows one person controls all of them. The statement was also timestamped on 2026-11-14 by six RFC 3161 timestamp authorities (FreeTSA, DigiCert, GlobalSign, Sectigo, DFN and Certum) and by OpenTimestamps.

• Read the statement (COEXISTENCE-ATTESTATION.txt). SHA-256: ec528ec89e2df9944a96a8c81399fc55e23a7f3ff7532b0aed738c3d3151ddb6
• How to verify it (VERIFY.md)
• What each file is (README.md)
• Download the full proof with signatures and timestamps (joe-coexistence-proof.zip)

Attestation

Joe signed this statement with his Proton Mail key. Download the signed attestation (joe-stamp-attestation.asc).

Stamp signing key attestation
=============================

I, Joe Boll <[email protected]>, certify that the following OpenPGP key
is my dedicated signing key for the sign-stamp / timestamping system
and related publications.

  Fingerprint: A008 A011 308E 8686 A8CC 7E5B A27F 71AB 1E01 5272
  Key ID:      A27F71AB1E015272
  Type:        Ed25519 (ECC)
  Created for: code/document signing & timestamp manifests

The OpenPGP public key is published as:
  joe-stamp-public-certified.asc

That file includes a certification signature from my long-standing
Proton Mail key (fingerprint 049C D95E A09D 6316 F742 7974 6E14 7753 D3D1 935E).

Signed with the Proton Mail key via OpenPGP.js.

Verifying

Import the key with gpg --import joe-stamp-public-certified.asc, then check a signature with gpg --verify document.sig document. Always check that the fingerprint matches the one on this page. To check the attestation, import the Proton Mail key and run gpg --verify joe-stamp-attestation.asc.