What is the best way to upgrade an OpenPGP key that was created 11 years ago? It's 1024-bit and is published on the key server.
I can create a new key, but what's the proper way to update the existing public key on the server?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
This question has a duplicate on Super User, where I also provided an answer. As the question is a better fit here and cross-site duplicates are not allowed, I will simply be repeating it here, extending it a little bit.
There is no way to "upgrade" an OpenPGP key. You will have to create a new one, and you will loose your reputation in the web of trust.
Some people I met decided to stick with a RSA 1024 primary key, but use stronger subkeys instead (which is easily possible without losing your reputation in the web of trust), which comes with secure day-to-day use (for encryption/signing documents with your subkeys), but might enable attackers to add and revoke certifications, subkeys and UIDs.