diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 0e75c65ed7cfda70bce4652eda83adf3b895ef4b..713087d68013d1e61994ebf2ddbd1033f52115ca 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -25,9 +25,9 @@ tests:
 publish:
   stage: deploy
   script:
-    - openssl aes-256-cbc -pass "env:ENCRYPTION_PASSWORD" -in secring.gpg.enc -out secring.gpg -d
-    - openssl aes-256-cbc -pass "env:ENCRYPTION_PASSWORD" -in pubring.gpg.enc -out pubring.gpg -d
-    - openssl aes-256-cbc -pass "env:ENCRYPTION_PASSWORD" -in gradle.properties.enc -out gradle.properties -d
+    - openssl aes-256-cbc -d -base64 -pbkdf2 -pass "env:ENCRYPTION_PASSWORD" -in gradle.properties.enc -out gradle.properties
+    - openssl aes-256-cbc -d -base64 -pbkdf2 -pass "env:ENCRYPTION_PASSWORD" -in pubring.gpg.enc -out pubring.gpg
+    - openssl aes-256-cbc -d -base64 -pbkdf2 -pass "env:ENCRYPTION_PASSWORD" -in secring.gpg.enc -out secring.gpg
     - ./gradlew ${GRADLE_ARGS} uploadArchives
   only:
     - master@general/stups/probkodkod
diff --git a/build.gradle b/build.gradle
index 8567d4b90fac93dee2a2b63de431295b099c1e4d..a8a1131be7424d8df5a582dfc272a3032752e4e5 100644
--- a/build.gradle
+++ b/build.gradle
@@ -89,6 +89,8 @@ if (project.hasProperty('ossrhUsername') && project.hasProperty('ossrhPassword')
 
 apply plugin: 'signing'
 
+ext."signing.secretKeyRingFile" = rootProject.file("secring.gpg").absolutePath
+
 signing {
     sign configurations.archives
 }
diff --git a/gradle.properties.enc b/gradle.properties.enc
index 30387d5f4334f340d662a1b82bdf0d6deba486a1..c1867a27ac7d323a86ce3c5a2d8257a97a0a5b10 100644
Binary files a/gradle.properties.enc and b/gradle.properties.enc differ
diff --git a/pubring.gpg.enc b/pubring.gpg.enc
index bca1c9c445599564b51e4621eab0f5377fb82df8..8ad11824421415e5455b09b4fc68af040a6c190f 100644
Binary files a/pubring.gpg.enc and b/pubring.gpg.enc differ
diff --git a/secring.gpg.enc b/secring.gpg.enc
index 4516de421e31d380c03feb7ab5b22efa37842e3c..087d41d8e55ca33bbdbacc52334567604dfe3398 100644
Binary files a/secring.gpg.enc and b/secring.gpg.enc differ