Cryptome PGP Keys Compromised, Revoked

Today Cryptome and operator John Young announced the compromise and revocation of their PGP keys. Relevant text posted to Cryptome below. Not the user agent string disclosing the use of Symantec's PGP Desktop product for Microsoft Windows.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

15 September 2015

I have learned today that all PGP public keys of John Young
 and Cryptome  have been
compromised.
The keys have been revoked today.

Two new keys have been generated today:

John Young 15-0915  0xD87D436C
Cryptome 15-0915  0x8CD47BD5

This message is signed by the first.

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.3 (Build 3017)
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=Q9BO
-----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

15 September 2015

I have learned today that all PGP public keys of John Young
 and Cryptome  have been
compromised.
The keys have been revoked today.

Two new keys have been generated today:

John Young 15-0915  0xD87D436C
Cryptome 15-0915  0x8CD47BD5

This message is signed by the first.

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.3 (Build 3017)
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=Q9BO
-----END PGP SIGNATURE-----

Cryptome 15-0915  0x8CD47BD5
42C5 436A 2297 4006 9DEC  9481 9B55 3C6B 8CD4 7BD5

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: PGP Desktop 9.6.3 (Build 3017)
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=nY5b
-----END PGP PUBLIC KEY BLOCK-----

2 thoughts on “Cryptome PGP Keys Compromised, Revoked

  1. It should be pointed out that as far as we know, the actual John Young got kidnapped today, and the perpetrator is cheeky enough to try and kidnap the kidnapping as well.

    Absent a statement signed by the old keys transfering credibility to the new ones, there's relatively little to discriminate this situation from "Carl Mark Force IV had a falling out with his busienss partner Ross Ulbricht and ran off with the site".

    • Well, if the revocation actually went out to keyservers, that should at least be evidence that *somebody* in possession of the old keys wanted them revoked.

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>