-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-elgg-16.0-buster-amd64.iso.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-elgg-16.0-buster-amd64.iso
      8b97940ff68e0695cf7aa74d8dca574b7f097a46c85ff774d665eaa8ac1d4bca  turnkey-elgg-16.0-buster-amd64.iso

    $ sha512sum turnkey-elgg-16.0-buster-amd64.iso
      052c173cd402656ab8aae8d1f637834e9c924cb00bc37bf196cb754282aebede792bfc59c995f07e66763dd673f12767a59d859f42a9835c9170bdc474e3a4f5  turnkey-elgg-16.0-buster-amd64.iso

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-elgg-16.0-buster-amd64.iso.hash
      turnkey-elgg-16.0-buster-amd64.iso: OK

    $ sha512sum -c turnkey-elgg-16.0-buster-amd64.iso.hash
      turnkey-elgg-16.0-buster-amd64.iso: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=t3lQ
-----END PGP SIGNATURE-----