pauljd/OrbitTv
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Signing-key backup 2 recorded (Bitwarden, verified)

Browse Source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
pauljd
2026-11-08 10:17:37 +00:00
co-authored by Claude Opus 5.5
parent c272f0c2c6
commit 9edbafb673
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/SIGNING-KEY-BACKUP.md
+8
View File
@@ -91,3 +91,11 @@ To check backup 1, run this with the stick mounted:
```bash
gpg --decrypt --output /dev/shm/orbit-check.p12 /run/media/pauljd/6FCC-BCBD/Orbit-TV-signing-key/orbit-signing-key.p12.gpg && cmp /dev/shm/orbit-check.p12 /home/pauljd/Documents/OrbitTV/orbit-tv/.tooling/android/debug.keystore && echo MATCH; shred -u /dev/shm/orbit-check.p12
```
**8 November 2026, backup 2 made and verified:**
- A Bitwarden secure note (hosted, EU).
- AES-256 gpg-encrypted with a separate recovery passphrase, which is kept on paper.
- It holds the signing key and, wrapped the same way, the Fourth Built gpg key.
- Paul decrypted both and got MATCH. No plaintext or staging copies were left behind.
**Recovery paths:** the stick with the Fourth Built passphrase, or Bitwarden with the recovery passphrase. Either one is enough on its own.