Documentation/process/maintainer-pgp-guide.rst

4 Kernel Maintainer PGP guide
17 The role of PGP in Linux Kernel development
20 PGP helps ensure the integrity of the code that is produced by the Linux
22 communication channels between developers via PGP-signed email exchange.
29 Both git repositories and tarballs carry PGP signatures of the kernel
35 - git repositories provide PGP signatures on all tags
36 - tarballs provide detached PGP signatures with all downloads
55 a secure working environment and safeguard the PGP keys used to
60 PGP tools
108 Protect your PGP key
111 This guide assumes that you already have a PGP key that you use for Linux
119 Understanding PGP Subkeys
122 A PGP key rarely consists of a single keypair -- usually it is a
125 PGP defines four capabilities that a key can have:
212 The more signatures you have on your PGP key from other developers, the
251 It is important to have a readily available backup of your PGP keys
263 PGP key.
476 your subkeys onto the smartcard. You will need both your PGP key
518 your PGP key passphrase, and then for the admin PIN. If the command
587 with your PGP key.
649 Using PGP with Git
663 To address both of these issues, Git introduced PGP integration. Signed
667 impersonate you without having access to your PGP keys.
671 Configure git to use your PGP key
716 import their PGP key. Please refer to the
733 the mailing list, and this workflow does not preserve PGP commit
735 upstream, even your own PGP commit signatures will end up discarded. For
748    provenance, even externally maintained trees carrying PGP commit
782 It is possible to use your PGP key to sign patches sent to kernel
784 (PGP-Mime or PGP-inline) tend to cause problems with regular code
799 If you already have your PGP key configured with git (via the
880 PGP incorporates a trust delegation mechanism known as the "Web of
884 entity, PGP leaves this responsibility to each user.
895 someone's PGP key, it is assumed to be valid. If at any point in the
900 We recommend that you use the combined TOFU+PGP trust model (which is
914 - `Kernel developer PGP Keyring`_
919 .. _`Kernel developer PGP Keyring`: https://korg.docs.kernel.org/pgpkeys.html