To verify, Example for Linux: GPG: Make sure you download the public key 4812C85C.asc and install it in your system. See the PUBLIC_KEY directory in this archive. gpg --import 4812C85C.asc Then type: gpg --verify bsu-3.0.1.tar.gz.asc Both files, bsu-3.0.1.tar.gz AND bsu-3.0.1.tar.gz.asc should be in the same directory when you do this. =============================================================== MD5SUM: md5sum -c MD5SUM =============================================================== SHA256SUM: sha256sum -c SHA256SUM ===============================================================