-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://keybase.io/turnkeylinux/pgp_keys.asc | gpg --import $ gpg --list-keys --with-fingerprint release@turnkeylinux.com pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] Key fingerprint = 694C FF26 795A 29BA E07B 4EB5 85C2 5E95 A16E B94D uid Turnkey Linux Release Key $ gpg --verify debian-8-turnkey-torrentserver_14.2-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key " For extra credit you can validate the key's authenticity at: https://keybase.io/turnkeylinux 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-8-turnkey-torrentserver_14.2-1_amd64.tar.gz a8329ab08b1d6036f7f2e188cf5d3def9b2a7a2bffd33fdcc48c309fd43451a4 debian-8-turnkey-torrentserver_14.2-1_amd64.tar.gz $ sha512sum debian-8-turnkey-torrentserver_14.2-1_amd64.tar.gz 1d46a9f12225db9179c0622d464b932cc9e340368efcb5c2ce31c7f1d333b2911bf85f26175d210b6df65e37c8489b864518d0a083d2c24e444b4d9db30548e5 debian-8-turnkey-torrentserver_14.2-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-8-turnkey-torrentserver_14.2-1_amd64.tar.gz.hash debian-8-turnkey-torrentserver_14.2-1_amd64.tar.gz: OK $ sha512sum -c debian-8-turnkey-torrentserver_14.2-1_amd64.tar.gz.hash debian-8-turnkey-torrentserver_14.2-1_amd64.tar.gz: OK -----BEGIN PGP SIGNATURE----- iQEcBAEBCAAGBQJZeIKkAAoJEIXCXpWhbrlNUM4H/ijz5lbPKSfEc6gxZm9lhLt9 drvqyaxtOkiDI4dz1dIw3SE8LEs1c2Bd2a5dU/CJUgzA7ynY9/CQ1BHRqPxtDNSy yRdHnBvT7trmUZiR/9jVzgHJRrIlDlRexoeNWKOts9YikmLwhJ1aa/Hhql7T2XiC LkPugI6XZ8y7GrZNJnZB6RDStERoboELopNgQvBWzl/p/ukJCNfjVqpTXH4BXiOs ztg3xwC3R+uI8cKMdoplfi0FMjOaKWR1QYHefYO4lAi26EoGIpI2kLG4UMwYm0fu reZV4CCqJR4fpm+t/KowIM+X44bJrUikl1CZHDlorO3AgMJKDMqwKLsdP6dm8+U= =7TCz -----END PGP SIGNATURE-----