-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://keybase.io/turnkeylinux/pgp_keys.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release@turnkeylinux.com
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
            Key fingerprint = 694C FF26 795A 29BA E07B  4EB5 85C2 5E95 A16E B94D
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify debian-9-turnkey-elgg_15.1-1_amd64.tar.gz.hash
      gpg: Signature made using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key <release@turnkeylinux.com>"

    For extra credit you can validate the key's authenticity at:

      https://keybase.io/turnkeylinux

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum debian-9-turnkey-elgg_15.1-1_amd64.tar.gz
      c376ec05fde623b3191e2858f9d233db9de7076a2872aec38b7146c1c516cd82  debian-9-turnkey-elgg_15.1-1_amd64.tar.gz

    $ sha512sum debian-9-turnkey-elgg_15.1-1_amd64.tar.gz
      ab739e2d9d3f3c07ef07adf1700ca6f4fb2969fe4eeb5ac88278eca584c99abb4a2b7d635e4137435b85112caa98ddf0ea080060cf598ddbb9e4add0e22d5174  debian-9-turnkey-elgg_15.1-1_amd64.tar.gz

   Note, you can compare hashes automatically::

    $ sha256sum -c debian-9-turnkey-elgg_15.1-1_amd64.tar.gz.hash
      debian-9-turnkey-elgg_15.1-1_amd64.tar.gz: OK

    $ sha512sum -c debian-9-turnkey-elgg_15.1-1_amd64.tar.gz.hash
      debian-9-turnkey-elgg_15.1-1_amd64.tar.gz: OK

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEaUz/JnlaKbrge061hcJelaFuuU0FAlwDrWoACgkQhcJelaFu
uU3DfQf+OomKbTYjZC2nSZ3ASaJyBYMBX5Nj9UmApbxestCpJDF3SqlzcULsZ45R
4DIrEVXGNuqQ209e2XDtuvwc+dj531q097vzx2Xb0dTBEk/qpcLZLi41cfdtHa3t
Cq+PY+nJQ8nfJqab/1cq5zPkD6/3OPLudWnmKKwwFyEZtMdkBJlzZwVZ4tewy5zO
PL12NVvYbrCKVN/LnrCUGpRH00jqSeU8tR77NXrypD4BwVGO6Czpg+D8630JcsXI
1BSffaBsvcxT3Qw0f6Mi9MQKpa3NMjY1Xs13zNrOdnkqCn+F++jGXRKz7IXW1dYr
+z+IdGVIIEb52oqoJiLfUzjIH1rigw==
=fuSC
-----END PGP SIGNATURE-----