-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-domain-controller-16.1-buster-amd64.iso.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-domain-controller-16.1-buster-amd64.iso
      df118f46eb9150f7b86e40a51e1039f00b4dd86653ef04cd4c889344229973e7  turnkey-domain-controller-16.1-buster-amd64.iso

    $ sha512sum turnkey-domain-controller-16.1-buster-amd64.iso
      b9931f889f8cadd8662855d0301c35c46b385cbc96bbfbb38787ca077384274ffdb903155298c935723f7bff6f06982ef8c5ec18d59c162c627e32f144989c63  turnkey-domain-controller-16.1-buster-amd64.iso

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-domain-controller-16.1-buster-amd64.iso.hash
      turnkey-domain-controller-16.1-buster-amd64.iso: OK

    $ sha512sum -c turnkey-domain-controller-16.1-buster-amd64.iso.hash
      turnkey-domain-controller-16.1-buster-amd64.iso: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=G92Z
-----END PGP SIGNATURE-----