-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://keybase.io/turnkeylinux/pgp_keys.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release@turnkeylinux.com
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
            Key fingerprint = 694C FF26 795A 29BA E07B  4EB5 85C2 5E95 A16E B94D
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-zurmo-15.0-stretch-amd64.iso.hash
      gpg: Signature made using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key <release@turnkeylinux.com>"

    For extra credit you can validate the key's authenticity at:

      https://keybase.io/turnkeylinux

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-zurmo-15.0-stretch-amd64.iso
      1a11485243caac9a6363f458a271a9c265a252860d67bb5aee76f7e991988fe3  turnkey-zurmo-15.0-stretch-amd64.iso

    $ sha512sum turnkey-zurmo-15.0-stretch-amd64.iso
      c423ad3ffa8092c89c6d728a62355233f03c0d33940c143b982fcac167ad7a3a68483fe2ea3a9816e02ebb75ddbbc9f58c990294700e8393743cb280c16c927d  turnkey-zurmo-15.0-stretch-amd64.iso

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-zurmo-15.0-stretch-amd64.iso.hash
      turnkey-zurmo-15.0-stretch-amd64.iso: OK

    $ sha512sum -c turnkey-zurmo-15.0-stretch-amd64.iso.hash
      turnkey-zurmo-15.0-stretch-amd64.iso: OK

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEaUz/JnlaKbrge061hcJelaFuuU0FAltMlT4ACgkQhcJelaFu
uU3aaAf9EAlX5fe50ivBsb6fbnplg0jiWosfPSBsRbzrpo6B2rgzu2xRghqMQnqS
ovltCnzj2m+siJqNF8kr0P4MJ3WoPdbEOFubOp1CaamT2ftxx95JFyo6rZCOuWtT
oyIP9DQLNl8u8PwYoToenHNS6dxoRzeCwIBZKdwTv8eAQL1KLUuugVM/GpZZU2Zs
Zki4ovQnVK8Wvf4ANt1nqHJdGLl4dcJKmDyhZk5E3a1TZw52E8iWeUJtvTRoz3x9
qOObCpk9h9kof6Gx/TrUFD1X6FyNX7cYy/CoV/UWc2evg4U4xlEGtfUWILKB6czu
COth0SbwhzmeNt4OJdct+g6/bMpl6A==
=nXHx
-----END PGP SIGNATURE-----