hashcat Forum
Can't verify GPG key for hashcat-3.10.tar.gz - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Misc (https://hashcat.net/forum/forum-15.html)
+--- Forum: General Talk (https://hashcat.net/forum/forum-33.html)
+--- Thread: Can't verify GPG key for hashcat-3.10.tar.gz (/thread-5817.html)

Can't verify GPG key for hashcat-3.10.tar.gz - nipponese - 08-31-2016

Hello,

I'm totally new to GPG. How do I verify the public key provided by hashcat?

I attempted several commands:


Code:
gpg --verify hashcat-3.10.tar.gz.asc hashcat-3.10.tar.gz 
gpg: Signature made Wed Aug 24 01:37:43 2016 PDT using RSA key ID 8A16544F
gpg: Can't check signature: No public key

Code:
gpg --no-default-keyring --keyring hashcat-3.10.tar.gz.asc --verify hashcat-3.10.tar.gz
gpg: no valid OpenPGP data found.
gpg: the signature could not be verified.

Code:
gpg --import hashcat-3.10.tar.gz.asc 
gpg: no valid OpenPGP data found.
gpg: Total number processed: 0

However, looking at my copy hashcat-3.10.tar.gz.asc in a text editor does show it contains data a PGP sig.

Here is my output from gpg --version

Code:
gpg (GnuPG) 2.0.30
libgcrypt 1.7.3
Copyright (C) 2015 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Home: ~/.gnupg
Supported algorithms:
Pubkey: RSA, RSA, RSA, ELG, DSA
Cipher: IDEA, 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH,
        CAMELLIA128, CAMELLIA192, CAMELLIA256
Hash: MD5, SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224
Compression: Uncompressed, ZIP, ZLIB, BZIP2


RE: Can't verify GPG key for hashcat-3.10.tar.gz - atom - 08-31-2016

https://hashcat.net/wiki/doku.php?id=frequently_asked_questions#how_do_i_verify_the_pgp_signatures