-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org pub rsa4096 2020-02-05 [SC] [expires: 2040-01-31] A8B2 EF42 8781 9B03 D351 6CCA 7623 1C20 425E 9772 uid [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) sub rsa4096 2020-02-05 [S] [expires: 2040-01-31] $ gpg --verify turnkey-b2evolution-16.1-buster-amd64.iso.hash gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-b2evolution-16.1-buster-amd64.iso 8d5dd0d5d5a2287a2e16042eeb3b2e0163ef440fe6bc1e51fff1e576642ac077 turnkey-b2evolution-16.1-buster-amd64.iso $ sha512sum turnkey-b2evolution-16.1-buster-amd64.iso a12b2d913612da75254166cd2244b93c81551c5ada6126087303c1e70fc3d1c1be760d05be5505cb491a52e99ab3882803636e12cf8f03933d47480d77565061 turnkey-b2evolution-16.1-buster-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-b2evolution-16.1-buster-amd64.iso.hash turnkey-b2evolution-16.1-buster-amd64.iso: OK $ sha512sum -c turnkey-b2evolution-16.1-buster-amd64.iso.hash turnkey-b2evolution-16.1-buster-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAmA7b5MACgkQrF6wBJPl vBy7+xAApFTLK4q06hl6YzCkknSekcJBIB3o/Jqnfx9HF4ZGVmj43J9W0OUqBoc9 8sYnh1hHNqZnZK/BLSOEELOtv6MRzdOZQdEeLiy4bJzs4se7Gm54rh7YjPMBzKji xlGiP+e+Twjx7OuWsci+T6pdDFHzY6kbO1olG7cv/bHKII0tflSTkvU9hJ2JEQ36 nZpZg05W1G8LaLwSDXeOsUvUuIMfXyYrig5p7WzuLZxTucSRlzgVYy2Jt/cChBmc THjXyOq+1DGgTLc4KD1cvT24L7y8HS/X6DbeKmTieoiT9w0AlO6E2fNb6ti/D2yT 4cTgdv0+A6xsNIWjc8PmFMVzAWr+zMqMM8spTGSRQN+0sQxITShFX5n+8xZ0TkQF SY8oUuXLFATF8JPWSqMKW3rNcihBz9O0PZLNIt2Lob9z7RXOI1Sek6vi2RnxmisF 3WjQQ1BUhsytt4N06ljc+ZJYHcCLhJeX1azPRI7EsqGItvbqnMeDy4VnqCm1Z21A igMEX8VJEAQuzV/BsAZAo8OQby+ES0NyT578K5NdJV4BJD6Kj/+f3asmhd2I43JM 09a76MptdM1mV5+Yn4xH63+t0qXX4XIxLuS4apib6Ei0oeT1AbamJJ/gNCJtrgZ6 2sHb59bcJ9Lu5Nx/PUJ11AZbkAI6jMQiVuovJsmldUwmo0qDx/Y= =dfg0 -----END PGP SIGNATURE-----