-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-phpbb-16.0-buster-amd64.iso.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-phpbb-16.0-buster-amd64.iso
      cc80df7a3faf016b07e78404d05ed289c0ef1c4cf624d278e2d9d392515caec7  turnkey-phpbb-16.0-buster-amd64.iso

    $ sha512sum turnkey-phpbb-16.0-buster-amd64.iso
      14341f4e1bbb5698a452efb92e2d46fada1e8f783a7cacca197111185e3674480f806b123a78afd9b64bd6868ea7a6c186e85df63782d59cbe38bb908e3f5a23  turnkey-phpbb-16.0-buster-amd64.iso

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-phpbb-16.0-buster-amd64.iso.hash
      turnkey-phpbb-16.0-buster-amd64.iso: OK

    $ sha512sum -c turnkey-phpbb-16.0-buster-amd64.iso.hash
      turnkey-phpbb-16.0-buster-amd64.iso: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAl7KTboACgkQrF6wBJPl
vBzGZg/7BYne5PoVmEM5z5L8n0cd0hy8b3IxdwbIouV+wKuVPrT1MQ/yrajyidfY
jAbNLC/spIzdmF37oUsRVuK8AT5fyU5ZicT15XOU5AAEY8P9VMy0yqkuEq2rijXj
86PgNBHc7H0iAT49cmM/EMVre2qU+l/xbsca1VReVfV4cn63WoE6DEClDaVEP/cd
8f9IUIoOynB1h3CXsVYVnBYmHF2nrKWBaWr421+sQazLGYu7qQiFXlBYkFhtWqRz
jbLMaF8NaY1xFYsVfWTmP3r385hjz1QClM4r2/RsVwvlKXJgk0rzqrSMYIo4na5m
rguUCjIldXPWnDPsHk4hSJ7DNCdk5YkTKLDUKY5NhzTMYoicsOb/9BeCHXOFqXBq
tJZdtIB3PtkulFVmKqxbLEZfeXLOjJf2d1JE2UO6N/AKyR2QBBee8C6zvXOKwNPZ
+R40puBdzamn8AfqjgVh6FaCN9Zvv2I1kstDBuD82jlb2DvViMTSQ3pwusbU8c5c
Feq4R2Dj6ujQz+5Ba6ulkK7KVeauWXf9pxE2PIlylkfwtE2OSnV3nhIUOkTf+Fvm
w+/p9hZLxfhKgtVmtL6jxnYch3xPVBSLjxU8FngjN4KqK9QaEpCdrDRf+G34Yb1B
Me+qxg4ONgWXZFKJKUkZ/oQyD+gFzTAss2Pc6OrG0qQ/u3/OP9c=
=gp9h
-----END PGP SIGNATURE-----