Verify the Sia release signature

All Sia release binaries are signed, which allows you to confirm that the version you've downloaded is indeed the exact version that we've released. This is an extra security check to ensure you're using legit, unmodified software, which can be pretty important when the app also handles money like Siacoins.

These instructions are also available on the official downloads page, just under the download links.

You can download the signing key here, and the signed hashes for the current release here.

1. Download and import the Sia signing key. wget -c https://sia.tech/releases/sia-signing-key.asc gpg --import sia-signing-key.asc

2. Download the signed hash file, and verify the signature. wget -c https://sia.tech/releases/Sia-v1.5.0-SHA256SUMS.txt.asc gpg --verify Sia-v1.5.0-SHA256SUMS.txt.asc

3. If you downloaded a zip file, unzip that first. unzip Sia-v1.5.0-linux-amd64.zip

4. Check that the files you downloaded were signed. sha256sum --check --ignore-missing Sia-v1.5.0-SHA256SUMS.txt.asc

You should see "OK" next to the files you did download and errors for the files you have not downloaded.