contrib: add Lagrang3's signing key
What the developer wrote
Authored by Lagrang3
contrib: add Lagrang3's signing key
Changelog-None
Signed-off-by: Lagrang3 <lagrang3@protonmail.com>
What changed, and why it matters
This commit simply adds a new developer's PGP public key to the project's list of trusted signing keys. It is an administrative/key-management change, not a code change, and introduces no security vulnerability by itself.
No security action required. Reviewers may optionally verify the key fingerprint out-of-band if this key is intended to sign future releases.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates SECURITY.md to list Lagrang3’s PGP fingerprint and adds the corresponding ASCII-armored public key block under contrib/keys/lagrang3.txt. There are no modifications to source code, build scripts, cryptographic logic, or release processes beyond adding a new authorized signing key.
Changed components
SECURITY.mdcontrib/keys/lagrang3.txtInspect captured patch +10 / −0
diff --git a/SECURITY.md b/SECURITY.md
index fdb708c1..b706fbc8 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -31,6 +31,7 @@ developers, and to validate signatures on releases:
| Madeline Paech | `madeline@blockstream.com` | 7169 D262 72B5 0A3F 531A A1C2 A57A FC23 1B58 0804 |
| Blockstream CLN Release | `cln@blockstream.com` | 616C 52F9 9D06 12B2 A151 B107 4129 A994 AA7E 9852 |
| Sangbida Chaudhuri | `sangbidac@gmail.com` | 1A37 1C2C 3064 5FAA 91AA 6B7D B643 E612 8422 1961 |
+| Lagrang3 | `lagrang3@protonmail.com` | C491 5808 7820 7F03 C3B9 66F9 B408 8CD4 608A 7CA1 |
You can import a key by running the following command with that individual’s fingerprint:
`gpg --keyserver hkps://keys.openpgp.org --recv-keys "<fingerprint>"`.
diff --git a/contrib/keys/lagrang3.txt b/contrib/keys/lagrang3.txt
new file mode 100644
index 00000000..95d72754
--- /dev/null
+++ b/contrib/keys/lagrang3.txt
@@ -0,0 +1,9 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+
+mDMEaUVSGhYJKwYBBAHaRw8BAQdAkki3aflOx+9GwXfvdEdXq9qqS8Kg9skaamBP
+3NMRmdO0IkxhZ3JhbmczIDxsYWdyYW5nM0Bwcm90b25tYWlsLmNvbT6IkAQTFgoA
+OBYhBMSRWAh4IH8Dw7lm+bQIjNRginyhBQJpRVIaAhsDBQsJCAcCBhUKCQgLAgQW
+AgMBAh4BAheAAAoJELQIjNRginyh6UMA/2xoj0CEqjTh7dmmRcBJaR6O23Dm+qb5
+bZxT6qL4efcZAQCWL8vEu1did9UE1+srqDcexmb6x2fAmFQfuQ0QvkI1Cw==
+=o95x
+-----END PGP PUBLIC KEY BLOCK-----
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.