diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index bec2c64214fb6af687c5b113a6ff8715ba3d602c..1bc49a65a513f4a5d51127bf49600083b9a6486b 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -30,9 +30,9 @@ tests:jdk-17:
 publish:
   stage: deploy
   script:
-    - openssl aes-256-cbc -pass "env:ENCRYPTION_PASSWORD" -d -in secring.gpg.enc -out secring.gpg
-    - openssl aes-256-cbc -pass "env:ENCRYPTION_PASSWORD" -d -in pubring.gpg.enc -out pubring.gpg
-    - openssl aes-256-cbc -pass "env:ENCRYPTION_PASSWORD" -d -in gradle.properties.enc -out gradle.properties
+    - openssl aes-256-cbc -pass "env:ENCRYPTION_PASSWORD" -d -a -md md5 -in secring.gpg.enc -out secring.gpg
+    - openssl aes-256-cbc -pass "env:ENCRYPTION_PASSWORD" -d -a -md md5 -in pubring.gpg.enc -out pubring.gpg
+    - openssl aes-256-cbc -pass "env:ENCRYPTION_PASSWORD" -d -a -md md5 -in gradle.properties.enc -out gradle.properties
     - ./gradlew ${GRADLE_OPTIONS} publish
   only:
     - master@general/stups/tla2bAST
diff --git a/build.gradle b/build.gradle
index 29dc50b075cff536d61afe8afbcc165ed7a602fb..c015db48aa2672369acdd53d51ed0c528308093e 100644
--- a/build.gradle
+++ b/build.gradle
@@ -130,6 +130,8 @@ publishing {
 	}
 }
 
+ext."signing.secretKeyRingFile" = rootProject.file("secring.gpg").absolutePath
+
 signing {
 	sign publishing.publications.mavenJava
 }
diff --git a/gradle.properties.enc b/gradle.properties.enc
index e9a9c971acda99e16295491923462b46a612c3fd..83e084509404a88a304c64f23a26e07bf592c44d 100644
Binary files a/gradle.properties.enc and b/gradle.properties.enc differ
diff --git a/pubring.gpg.enc b/pubring.gpg.enc
index 861ea058c7ffba38f27570fc5099b96aa0c3940e..fb1dfb132bd34d077723753821aefdc42be64bc2 100644
Binary files a/pubring.gpg.enc and b/pubring.gpg.enc differ
diff --git a/secring.gpg.enc b/secring.gpg.enc
index 9e10ccfc0db8c240dd7a3fa95e9807f12dbd402a..048652a825198ed70f778f2b82600b83be9d5d3e 100644
Binary files a/secring.gpg.enc and b/secring.gpg.enc differ