SGX Data — Public Identity Key

Public key used to sign deliverables produced by SGX Data consultancy. Chave pública usada para assinar entregas da SGX Data.

Fingerprint

C76D A9A7 937D 0026 3A45  1A7C AE24 F28C 649B 4045

Identity

SalvatoreGX <salvatoregx@sgxdata.com.br>
ed25519 — created 2026-05-04 — signing subkey expires 2027-05-04 (renewed annually)

SGX Data is an individual consultancy; the legitimate signer of any SGX Data deliverable is Salvatore acting in that role. The same key carries additional UIDs for personal and CollabPlan contexts.

Fetch (plain HTTPS)

curl -fsSLO https://keys.sgxdata.com.br/salvatoregx-sgxdata-pubkey.asc
gpg --import salvatoregx-sgxdata-pubkey.asc
gpg --fingerprint salvatoregx@sgxdata.com.br

The fingerprint reported by gpg --fingerprint must match the value above.

Fetch (Web Key Directory)

gpg --auto-key-locate wkd --locate-keys salvatoregx@sgxdata.com.br

Resolves automatically via openpgpkey.sgxdata.com.br (WKD-Advanced). No manual URL handling.

Verifying an SGX Data deliverable

gpg --verify deliverable.sig deliverable

Output should report Good signature from "SalvatoreGX <salvatoregx@sgxdata.com.br>" with the fingerprint above. Any other fingerprint, or a BAD signature result, means do not trust the artifact.

Last rotated: 2026-05-04 · This page is published from the SGX Data repository's etc/keys/public/index.html. The same public key is also published at keys.salvatoregx.com.br (personal identity, GitLab Pages) and keys.collabplan.ai (CollabPlan engineering identity, Cloudflare Pages).