-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-tkldev-16.0-buster-amd64.iso.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-tkldev-16.0-buster-amd64.iso
      b7ef5f313bf45b41d6be0d01b033194a1018d52156623f4fa9e4162384db26ca  turnkey-tkldev-16.0-buster-amd64.iso

    $ sha512sum turnkey-tkldev-16.0-buster-amd64.iso
      ce49f772da9aecd851f2bab6d94926b85e68eec9a03d6ddeb22c1f6fb20ae2e856bc0091a8828c2d8cebe73bdfbb74b63aa547bc19705fb4d38395d6c769d2f0  turnkey-tkldev-16.0-buster-amd64.iso

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-tkldev-16.0-buster-amd64.iso.hash
      turnkey-tkldev-16.0-buster-amd64.iso: OK

    $ sha512sum -c turnkey-tkldev-16.0-buster-amd64.iso.hash
      turnkey-tkldev-16.0-buster-amd64.iso: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=dmue
-----END PGP SIGNATURE-----