What the developer wrote
Authored by Viktor Torstensson
scripts: add gpg key for ViktorT-11
What changed, and why it matters
This commit simply adds a new trusted PGP public key for a person named ViktorT-11 to the list of keys used by LND's release-signature verification script. It does not change any code logic, fix any bug, or introduce any vulnerability. It is a routine administrative update to the release-signer keyring.
No security action required. Reviewers may optionally confirm the key fingerprint belongs to the legitimate new signer through an out-of-band channel, as is standard practice for adding release-signing keys.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff adds scripts/keys/ViktorT-11.asc, an ASCII-armored EdDSA/ECDSA PGP public key (fingerprint C20A78516A0944900EBFCA29961CC8259AE675D4), and registers that fingerprint/name in the KEYS array of scripts/verify-install.sh. verify-install.sh is a helper script that lets users check LND release binaries against maintainer signatures. No executable code, cryptographic parameters, or verification logic are modified.
Changed components
scripts/verify-install.shscripts/keys/ViktorT-11.ascInspect captured patch +15 / −0
diff --git a/scripts/keys/ViktorT-11.asc b/scripts/keys/ViktorT-11.asc
new file mode 100644
index 0000000..334c8f2
--- /dev/null
+++ b/scripts/keys/ViktorT-11.asc
@@ -0,0 +1,14 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=Fj36
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/scripts/verify-install.sh b/scripts/verify-install.sh
index 5c3aaed..a1f84ed 100755
--- a/scripts/verify-install.sh
+++ b/scripts/verify-install.sh
@@ -31,6 +31,7 @@ KEYS+=("32F7EA1E7A0339F7D37164B9F82D456EA023C9BF hieblmi")
KEYS+=("5295A477FFC8064D7057B191FA7E65C951F12439 proofofkeags")
KEYS+=("3E9BD4436C288039CA827A9200C9E2BC2E45666F suheb")
KEYS+=("5F75437E11695F86D50C11BB1AFF9C4DCED6D666 ziggie1984")
+KEYS+=("C20A78516A0944900EBFCA29961CC8259AE675D4 ViktorT-11")
TEMP_DIR=$(mktemp -d /tmp/lnd-sig-verification-XXXXXX)
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.