# PGP verification of releases

**URL:** https://support.nitrokey.com/t/pgp-verification-of-releases/5834
**Category:** Nitrokey Generic
**Created:** [January 10, 2024, 7:43pm UTC](https://support.nitrokey.com/t/pgp-verification-of-releases/5834 "2024-01-10T19:43:13Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![newNKuser](https://support.nitrokey.com/letter_avatar_proxy/v4/letter/n/ccd318/32.png) [@newNKuser](https://support.nitrokey.com/u/newNKuser)
#### Post date: [January 10, 2024, 7:43pm UTC](https://support.nitrokey.com/t/pgp-verification-of-releases/5834/1 "2024-01-10T19:43:13Z")

</div>

It would be great if verification of NK firmware releases was easier; e.g. the [Downloads page](https://www.nitrokey.com/download) currently doesn’t have the fingerprint and link to the public key of @daringer (Markus Meissner), even though he signs the new Nitropad firmware releases.

FWIW I think the correct fingerprint of that key is `CC74 B712 0BFA A36F F428 6872 4C14 49F1 C980 4176`, but it would be nice to have confirmation (here, but also on the website and in other places).

For the Nitrokey firmware there is not even a signature file published with the release; it would be nice if there was.

That said, I like your products! Great work!

---

<div class="post-metadata">

### Author: ![daringer](https://support.nitrokey.com/user_avatar/support.nitrokey.com/daringer/32/684_2.png) [@daringer](https://support.nitrokey.com/u/daringer)
#### Post date: [January 11, 2024, 12:22pm UTC](https://support.nitrokey.com/t/pgp-verification-of-releases/5834/2 "2024-01-11T12:22:30Z")

</div>

Hey @newNKuser

updated my github profile page to list it: [daringer (Markus Meissner) · GitHub](https://github.com/daringer)

Furthermore, the Nitrokey 3 Firmware has a signed binary inside the (zip) package, which is checked during firmware upload - so that why there is no need for an additional detached sign next to the files.

best
