=== modified file 'publish-distro.d/10-sign-releases'
--- publish-distro.d/10-sign-releases	2016-11-25 16:18:43 +0000
+++ publish-distro.d/10-sign-releases	2018-10-17 11:45:18 +0000
@@ -49,9 +49,13 @@
 		    quantal:*|raring:*|saucy:*|trusty:*|utopic:*|vivid:*|wily:*|xenial:*|yakkety:*)
 			printf '%s\n' "-u 0x630239CC130E1A7FD81A27B140976EAF437D05B5 -u 0x790BC7277767219C42C86F933B4FE6ACC0B21F32 --digest-algo SHA512"
 			;;
+		    # Use single-signature 4096 key SHA512 for zesty..cosmic, including dist-upgrade tarballs
+		    zesty:*|artful:*|bionic:*|cosmic:*)
+			printf '%s\n' "-u 0x790BC7277767219C42C86F933B4FE6ACC0B21F32 --digest-algo SHA512"
+			;;
+		    # Use dual-signature using 2012 & 2018 4k keys and SHA512 for the rest (DD-series+), including dist-upgrade tarballs
 		    *)
-		    # Use single-signature 4096 key SHA512 for zesty and up, including dist-upgrade tarballs
-			printf '%s\n' "-u 0x790BC7277767219C42C86F933B4FE6ACC0B21F32 --digest-algo SHA512"
+			printf '%s\n' "-u 0x790BC7277767219C42C86F933B4FE6ACC0B21F32 -u 0xF6ECB3762474EDA9D21B7022871920D1991BC93C --digest-algo SHA512"
 			;;
 		esac
 		;;

=== modified file 'sign.d/10-sign'
--- sign.d/10-sign	2018-03-20 22:39:28 +0000
+++ sign.d/10-sign	2018-10-17 11:45:18 +0000
@@ -36,9 +36,13 @@
 		    quantal:*|raring:*|saucy:*|trusty:*|utopic:*|vivid:*|wily:*|xenial:*|yakkety:*)
 			printf '%s\n' "-u 0x630239CC130E1A7FD81A27B140976EAF437D05B5 -u 0x790BC7277767219C42C86F933B4FE6ACC0B21F32 --digest-algo SHA512"
 			;;
+		    # Use single-signature 4096 key SHA512 for zesty..cosmic, including dist-upgrade tarballs
+		    zesty:*|artful:*|bionic:*|cosmic:*)
+			printf '%s\n' "-u 0x790BC7277767219C42C86F933B4FE6ACC0B21F32 --digest-algo SHA512"
+			;;
+		    # Use dual-signature using 2012 & 2018 4k keys and SHA512 for the rest (DD-series+), including dist-upgrade tarballs
 		    *)
-		    # Use single-signature 4096 key SHA512 for zesty and up, including dist-upgrade tarballs
-			printf '%s\n' "-u 0x790BC7277767219C42C86F933B4FE6ACC0B21F32 --digest-algo SHA512"
+			printf '%s\n' "-u 0x790BC7277767219C42C86F933B4FE6ACC0B21F32 -u 0xF6ECB3762474EDA9D21B7022871920D1991BC93C --digest-algo SHA512"
 			;;
 		esac
 		;;