-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-mahara-17.0-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-mahara-17.0-bullseye-amd64.iso 56b22f675ea4f8bf1af2b60e592973f1a7e0d5ccff63ff8ddcf1f3ab6e34a246 turnkey-mahara-17.0-bullseye-amd64.iso $ sha512sum turnkey-mahara-17.0-bullseye-amd64.iso 7aec0aeef735cfe0bb932cfe677dd3842f1892f8d98a2465a95f5071f3c977560bd38ba523af87fa472666cb6d40a767e4706fec0691a155d1e3ec25f8b3ee14 turnkey-mahara-17.0-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-mahara-17.0-bullseye-amd64.iso.hash turnkey-mahara-17.0-bullseye-amd64.iso: OK $ sha512sum -c turnkey-mahara-17.0-bullseye-amd64.iso.hash turnkey-mahara-17.0-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmJlPIMACgkQHkh6RjHW /rZUDA//RSXH5WSXkgOAcRO7jaSGIWzS1ANVDqwB89mk32gotnDTfJL2TWCpC8Ak 5+6S0Bv7C+sVXgqkrQFVSGZGGnS/6cpDGXS54/lmuHVl59BZTJvcnVpwUQ6c2ZJ6 HWmxOk8Gf7K7GcaCYYOFP2q2xdR2BB+ppsM0L0fdwRGamtU80EVihiH8rLVdg5ZS FBiZpZL4Ytb7nm/g9iChhKeyDaeJjEWq07TQR6m+kX+uXabtaTLNwCGAGJPvVjkQ ceD8Kr1PeBje5EY1BPjft2VrTb18AbxeZmV/g8zCRKectZqYNp0Wy2Wxf0f4OXgx aUMSLFNmQfe6O7wGa3Ay0aKu6bVIyH3rfh1n11vn0tLMYHIyJqT691AxHdT3LiFZ cR/ck2VgxV2BFKwEB08IQOFNDvZApZBAnJLr+TS1kaxbqEWjZFqHXMd+lpXobc23 21skxsTgdzaNFpMxLxq8c05xMrU8TEEfGgT6esmBWvIFFoXd/qJN1hCfFScP8xX6 XeqFfCvdD7JhksszXaPXjOUeuR4wYNtj2WMLHp0RCQm1qYPrSFfvNdAvDGNCCuar o1BfPUhsUw21FHB1/4yv25zbgCePAw27TSiMAo0ErjH2xmEIEL7Tjzh5Uh88gYBO cG2gMq5GwTaysSiws0i0PTUkrUUIx2Wveq6Ft+gyx567Oty7jp8= =5oT9 -----END PGP SIGNATURE-----