Black Lamp · Operator Encryption Key
====================================

This is the public encryption key for sources who want to encrypt their
submissions BEFORE the submission ever reaches our server.

You don't have to use it. The server already encrypts at rest with the
operator's age key — the private half of which never touches the server.
Pre-encrypting just adds a second layer.


age recipient (recommended)
---------------------------

    age1tdnytf8uk93lmyfhkrkcpmrrq05n28tqmjmny8hw33l2ulkuud8quk8wy0

To pre-encrypt a file before submitting:

    age -r age1tdnytf8uk93lmyfhkrkcpmrrq05n28tqmjmny8hw33l2ulkuud8quk8wy0 \
        -o my-document.pdf.age my-document.pdf

Then upload my-document.pdf.age through the form. The server will
encrypt it AGAIN with the same recipient (age handles nested encryption
gracefully) and the operator decrypts both layers on an offline machine.


Verification
------------

This file is mirrored at:
  - https://blacklamp.org/pgp.txt
  - The operator's verified social channels (X: @vmprsec)

Cross-check the recipient string across at least two of these before
trusting it. If they don't match, do not submit.


Last rotation:    2026-05-09  (initial deploy)
Next planned:    2027-05-09