https://datatracker.ietf.org/doc/html/rfc4880#section-5.2.3....
I believe separate keys for encryption and signing is the default in most implementations.