-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

As of January 01 2026, cryptostorm has not received any National Security Letters or FISA court orders, and we have not been subject to any gag order(s) by a FISA court, or any other similar court(s) of
any government. cryptostorm has never placed any backdoors in our hardware or software and has not received any requests to do so. cryptostorm has never disclosed any user communications to any third party.
No searches or seizures of any kind have ever been performed on cryptostorm assets.

This canary will be updated quarterly, and since it will be done manually, it might be off by a day or two.

Recent headlines:
Rescue crew finds 3 hikers dead in Southern California mountains during strong winds - https://www.cnn.com/2025/12/30/us/california-hikers-die-mount-baldy
Aoostars new eGPU has an 800W PSU and a TB5 connector and yet fails to include an M2 connector or a LAN port - https://www.techradar.com/pro/aoostars-new-egpu-has-an-800w-psu-and-a-tb5-connector-and-yet-fails-to-include-an-m2-connector-or-a-lan-port

To verify this message, on the terminal import our public key from keyserver.ubuntu.com or any of the other popular keyservers:
 $ gpg --keyserver keyserver.ubuntu.com --recv-key E9C7C942
 gpg: requesting key E9C7C942 from hkp server keyserver.ubuntu.com
 gpg: key E9C7C942: public key "cryptostorm support (keybase.io/cryptostorm) <support@cryptostorm.is>" imported
 gpg: no ultimately trusted keys found
 gpg: Total number processed: 1
 gpg:               imported: 1  (RSA: 1)
 $ gpg2 --fingerprint E9C7C942
 pub   4096R/E9C7C942 2015-01-22
       Key fingerprint = 4D87 F984 A222 8392 57FE  36A5 BBDB 991A E9C7 C942
 uid                  cryptostorm support (keybase.io/cryptostorm) <support@cryptostorm.is>
 uid                  [jpeg image of size 14369]
 uid                  [jpeg image of size 20640]
 sub   4096R/E9F7009A 2015-01-22
 $ gpg --verify canary.txt
 gpg: Good signature from "cryptostorm support (keybase.io/cryptostorm) <support@cryptostorm.is>"

There will most likely be other lines in the output from that last command, but as long as it says "Good signature", the verification worked correctly.
Our PGP public key is also available at:
https://keybase.io/cryptostorm
and
https://keys.mailvelope.com/pks/lookup?op=get&search=0xBBDB991AE9C7C942
and
https://keys.openpgp.org/vks/v1/by-fingerprint/4D87F984A222839257FE36A5BBDB991AE9C7C942
-----BEGIN PGP SIGNATURE-----
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=viuP
-----END PGP SIGNATURE-----