
56 Chapter 4
# sha1 gnupg-w32cli-1.4.0a.zip
SHA1 (gnupg-w32cli-1.4.0a.zip) = 28be01b7f8eaa29db73d11bf8b9504e823c07c2b
#
Compare the checksum generated by your checksum
program to the checksum provided by the GnuPG developers.
1
If they match, you can be fairly certain that Mallory has not
tampered with the software you downloaded.
NOTE For the best possible security without using digital signatures, compare
the checksum of the file with a checksum taken from a different down-
load site.
Regardless of how you calculate your checksums, if they
do not match, your download was corrupted, your checksum
program is defective, the GnuPG developers didn’ ...