PGP Key Rotation Notice
Notice ID: SUNELL-PSIRT-ROT-2026-01 ｜ Effective: 28 October 2026 ｜ Contact: security@sunellsecurity.com
What happened
As part of our scheduled key management practice under the Sunell Coordinated Vulnerability Disclosure (CVD) policy, the Sunell PSIRT has rotated the OpenPGP key used for encrypted vulnerability reporting. There is no indication that the previous key was compromised. This rotation is a routine security hygiene measure.
New key — in effect now
Fingerprint:
415A 45C7 0EC3 23A3 1C86 D93F 8D7B 703D DCE2 462A
Download: https://www.sunellsecurity.com/.well-known/sunell-security-pgp.asc
| Property | Value |
|---|---|
| User ID | Sunell Security Team <security@sunellsecurity.com> |
| Algorithm | RSA 4096 (dedicated signing and encryption subkeys) |
| Created / Expires | 2026-10-27 / 2029-10-27 |
Previous key — revoked
The previous key has been revoked and must no longer be used to encrypt reports to us:
E467 C567 3083 2274 EE72 4505 2525 8782 B2F3 5DE8
The revoked public key is published here so you can import it and let your mail client mark the old key as revoked:https://www.sunellsecurity.com/.well-known/sunell-security-pgp-revoked-old.asc
Action required:
Import the new public key from the URL above (also referenced in our
security.txt→Encryptionfield).Import the revoked old key file so your client flags it as revoked and blocks accidental use.
Verify the new fingerprint against this notice before sending encrypted reports.
Verification
curl -O https://www.sunellsecurity.com/.well-known/sunell-security-pgp.asc gpg --import sunell-security-pgp.asc gpg --fingerprint security@sunellsecurity.com # expected output: # 415A 45C7 0EC3 23A3 1C86 D93F 8D7B 703D DCE2 462A
Questions
If you experience any issue reaching us with the new key, contact us unencrypted at security@sunellsecurity.com or through your regular Sunell sales / support contact, and we will arrange an alternative secure channel.