-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify debian-11-turnkey-wireguard_17.1-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-11-turnkey-wireguard_17.1-1_amd64.tar.gz e540fed103618da226250b5a6203b420f2b9070e96e6af2ccd733e274d83e2cb debian-11-turnkey-wireguard_17.1-1_amd64.tar.gz $ sha512sum debian-11-turnkey-wireguard_17.1-1_amd64.tar.gz 668d9b18099c34bacd16331707c9a940704d3e8e021be7b7b76660382403aac1c1bd56213a890417224d57dfdf58dd119e6a81511e3ddcf8a5df049ec287930e debian-11-turnkey-wireguard_17.1-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-11-turnkey-wireguard_17.1-1_amd64.tar.gz.hash debian-11-turnkey-wireguard_17.1-1_amd64.tar.gz: OK $ sha512sum -c debian-11-turnkey-wireguard_17.1-1_amd64.tar.gz.hash debian-11-turnkey-wireguard_17.1-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmQEVSIACgkQHkh6RjHW /rYKpRAAn9RH16Lrw5Su9BrHssPoFxYZq+f1Bmcaq6CyHxG0EWaARQx1EotiCmow rCorrqn/RPyF7LOFFhqPQwawevkzsPFMW6NiuigpG5rz0Fj2l2ul4bLxnh7mpltX pZGJA38iF/+YEsXNzRiufFNT5cSnrv4i5MziU6QEiWyBzTWMRM0IHjXjG2hTVa/S BDXWhogKqolhrz+YM7HbkGH5pWSPBz0mrJ7p5QJTBk6gKAubVGyn5Fun2bemR6UT FiNOitjO0XLnEgQK67yeK61p9sH+GbiYRB6abupIG5wA++1VZjwjLKJF7UMVMA3o Id5/uL/mB8nVICmyVU1Jk+BCYEprLBIIC/QhnFy65Jn4ASAoVy6lW2JK4yI8PySY uejD+N0wpGajV9who61Tv6WfFAVU67wVgZTOc32iK/0UqKlDhuzqZBSFsrA2X6Ug FPQeJZxbtDKAsN5vGoSsRbn4WmnQpIt2YUL4PZ08QwnsRBAu9HfHd7tTlM4qHfLv +WQ441UNALCZk7XqGK4fub6ODeNsYeFOASsyg/X7mbQqKU7G28f6hsNMPj9/DlZH UK29jkzBa5roy6s/Pu5t0kBs3m57HBlDqkTweKYPXg1tZTVf7EEnyOIhRwq1PqMF fnHmcVtNsI8Idx7ljdY5AnkNtpjfCUbXTRm+SgDLRYtUoZvapUU= =nqHi -----END PGP SIGNATURE-----