-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Two steps are required to cryptographically verify image integrity. 1. By verifying the integrity of this signature file, you can be sure that the checksums included in this file are valid. $ gpg --keyserver hkp://pool.sks-keyservers.net --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-foodsoft-14.1-jessie-amd64-xen.tar.bz2.sig gpg: Good signature from "Turnkey Linux Release Key" 2. By calculating the image checksum and validating the hashed value is the same as listed below, you can be sure the image was not corrupted in transit or tampered with. $ md5sum turnkey-foodsoft-14.1-jessie-amd64-xen.tar.bz2 be9ab902c10b98e9adc312ddeafd8f73 $ sha1sum turnkey-foodsoft-14.1-jessie-amd64-xen.tar.bz2 ec37d2408b1e20e74873508e402a49a3b843f9f9 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAEBAgAGBQJXDJnzAAoJEIXCXpWhbrlNmg4H/R9pMww0kf5HnYfynEfGTmb3 lEvcarBNCdnIF/namdtGhTzYcybokz6pqWl5InLF7iT5doPMhSfIPgsroM3fJSJC CGdBqT6NfNps7i+Kw6jSfear3PPLuVt1Wgez0MCFVDrMWeMEcUnKMUMlNi6gxL4z 8jsAowAnICmNcgv8w2mwq2PLfbuLUBerJ7y06wljSMPpO3Z1RTg+xqpbzjiVa9s0 HNje8t0HBYwMnc+Bn/q8p4s1j6c42zBDtIjTix+KGZhdgOB7KuCmRFu1vI5gEI7v KV30p6YqK8BZqsvrmS6lRWR6OH402EE1Llp8Kq73dVI4PEizOx/GJWtAztx0ek0= =oKXg -----END PGP SIGNATURE-----