Keys¶
The genesis block names the Network Authority’s first key and the root key that signed it. A key succession replaces the NA key for a planned rotation and keeps the sovereign’s identity. The root key, kept offline, signs each succession.
Key Succession and the Root Key
Replacing the NA key without losing old signatures, what a succession does not cover, and the ceremony that keeps the root key offline (v1.5.0, beta routes).
Walkthrough: Succeeding the NA Key
A recorded run of the ceremony on a local NA, through the restart with the new key and verification across both keys.