Coinkite CTO Peter D. Gray's GPG key signed a large number of commits under the switck GitHub account in the libngu repository (the library that introduced the critical RNG preprocessor bug).
This includes the key January 2021 commit (f19de05) that contained the defective #ifndef guard. Multiple independent checks (terminal verification scripts shared publicly) confirmed the signatures match Peter’s known key used for Coldcard/firmware work under the doc-hex identity.
quotingThe rumor going around is that this switck character was actually doc hex
nevent1q…falx
nevent1q…hgm8

