-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Two steps are required to cryptographically verify image integrity.

1. By verifying the integrity of this signature file, you can be sure that
   the checksums included in this file are valid.

    $ gpg --keyserver hkp://pool.sks-keyservers.net --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-icescrum-14.1-jessie-i386.iso.sig
      gpg: Good signature from "Turnkey Linux Release Key"

2. By calculating the image checksum and validating the hashed value is the
   same as listed below, you can be sure the image was not corrupted in
   transit or tampered with.

    $ md5sum turnkey-icescrum-14.1-jessie-i386.iso
      835d98225e685911c0b978d117673231

    $ sha1sum turnkey-icescrum-14.1-jessie-i386.iso
      20a5271e36ca1f02c1832af8a437c8a313b32b59

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAEBAgAGBQJXCkPyAAoJEIXCXpWhbrlN/t4H/2JDbADZO5rhNCY45JyFTKRH
YCCtKhc56/T5UR4XjEj8e+lryzRAy9Ai3QvropKjX3I16UPgmAexwdiE4OP1w3rw
dHX0S4OF5G7zR2F6AhayvFwpXd5SjT6C+1GrEd+5lMampTjHVhXZmUPFGSYb/79w
aAsZv3HwF13WXKywbUcIfJQqIGfjtX6YU/i2Xzaj1DfTWrQgGHkZChcNYhDH2L79
loVItPDd5PovWHILNk7ttExizwlz1H4HzzOayvx+04LjSv3NSrrO05qBVgZg7LQd
F9/4fr9qtr3BlIUX1Jvq5neAEF/3NYbVduX2lCp7ea60/aDceV4pJkoBD052Yss=
=G7BI
-----END PGP SIGNATURE-----