To verify the signature of the package you downloaded, you will need to download the ".asc" file as well. Assuming you downloaded the package and its signature to your Desktop, run:
-"C:\Program Files\Gnu\GnuPg\gpg.exe" --verify C:\Users\Alice\Desktop\tor-browser-2.3.25-13_en-US.exe.asc C:\Users\Alice\Desktop\tor-browser-2.3.25-13_en-US.exe+
"C:\Program Files\Gnu\GnuPg\gpg.exe" --verify C:\Users\Alice\Desktop\torbrowser-install-_en-US.exe.asc C:\Users\Alice\Desktop\torbrowser-install- _en-US.exe
The output should say "Good signature":
gpg: Signature made Wed 31 Aug 2011 06:37:01 PM EDT using RSA key ID 63FEE659
@@ -137,14 +137,13 @@
To verify the signature of the package you downloaded, you will need
to download the ".asc" file as well. Assuming you downloaded the
- package and its signature to your Desktop, run (where stands
- for the version of Tor Browser you downloaded):
+ package and its signature to your Desktop, run:
- For Mac OS X users:
- gpg --verify ~/Desktop/TorBrowser--osx32_en-US.dmg{.asc*,}
+ For Mac OS X users:
+ gpg --verify ~/Desktop/TorBrowser--osx32_en-US.dmg{.asc*,}
- For Linux users (change 32 by 64 if you have the 64-bit package):
- gpg --verify ~/Desktop/tor-browser-linux32-_en-US.tar.xz{.asc*,}
+ For Linux users (change 32 by 64 if you have the 64-bit package):
+ gpg --verify ~/Desktop/tor-browser-linux32-_en-US.tar.xz{.asc*,}
The output should say "Good signature":