-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Two steps are required to cryptographically verify image integrity. 1. By verifying the integrity of this signature file, you can be sure that the checksums included in this file are valid. $ gpg --keyserver hkp://pool.sks-keyservers.net --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-sahana-eden-14.1-jessie-amd64.iso.sig gpg: Good signature from "Turnkey Linux Release Key" 2. By calculating the image checksum and validating the hashed value is the same as listed below, you can be sure the image was not corrupted in transit or tampered with. $ md5sum turnkey-sahana-eden-14.1-jessie-amd64.iso d02fc30104a1640f385cb203e340d708 $ sha1sum turnkey-sahana-eden-14.1-jessie-amd64.iso 4be8a3e904731d30d1e3dd72437110194cfa843a -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAEBAgAGBQJXCkP0AAoJEIXCXpWhbrlNqfsIAODxOpOLGIoXI3V1MHqm+Sjk AuTt/XuVsrIf43lZh+cclB+7Jub/3E/GV2Dobu5L5AdUWtPxVg9nAQgIi4+AqdV1 BO7SC65H3K5kxLO9efkpdjWaz/7ZjRy25VyD02sspw6bZoprj1zYLNWcpM0bN4pg Ef681z0qAle4D87bVWOcFj84mQ7G86odCQ4HIqOIzdCYWJnSVCHx6cnPj4X1amE4 gkQBDnTRY0s/FrukPx+PNnOc3xW0ODmFHCmyoLcidiA/3aLjYlsoRdFTcMj8BGg/ u/p5qTvQk8g/5XeC8LWU9hH45evLzhOiFgiNakaabMr1M+hQmT8zjUCfriauM1k= =JhO9 -----END PGP SIGNATURE-----