Bash instructions to verify litecoin core gpg sigs with thrasher-au's key.

verify-litecoin-gpg-sigs.md

Verify Litecoin Core sigs

Get thrasher-au's GPG key (0xFE3348877809386C) from mit.edu keyserver

$ gpg --keyserver pgp.mit.edu --recv-keys FE3348877809386C

$ gpg --fingerprint FE3348877809386C
pub   rsa2048 2013-06-19 [SC]
      59CA F0E9 6F23 F537 4794  5FD4 FE33 4887 7809 386C
uid           [  full  ] Adrian Gallagher <thrasher@addictionsoftware.com>
sub   rsa2048 2013-06-19 [E]

Download all binaries

$ wget https://download.litecoin.org/litecoin-0.16.3/linux/litecoin-0.16.3-aarch64-linux-gnu.tar.gz && wget https://download.litecoin.org/litecoin-0.16.3/linux/litecoin-0.16.3-arm-linux-gnueabihf.tar.gz && wget https://download.litecoin.org/litecoin-0.16.3/linux/litecoin-0.16.3-i686-pc-linux-gnu.tar.gz && wget https://download.litecoin.org/litecoin-0.16.3/linux/litecoin-0.16.3-x86_64-linux-gnu.tar.gz && wget https://download.litecoin.org/litecoin-0.16.3/osx/litecoin-0.16.3-osx.dmg && wget https://download.litecoin.org/litecoin-0.16.3/osx/litecoin-0.16.3-osx64.tar.gz && wget https://download.litecoin.org/litecoin-0.16.3/win/litecoin-0.16.3-win32-setup.exe && wget https://download.litecoin.org/litecoin-0.16.3/win/litecoin-0.16.3-win32.zip && wget https://download.litecoin.org/litecoin-0.16.3/win/litecoin-0.16.3-win64-setup.exe && wget https://download.litecoin.org/litecoin-0.16.3/win/litecoin-0.16.3-win64.zip && wget https://download.litecoin.org/litecoin-0.16.3/src/litecoin-0.16.3.tar.gz

Download SHA256SUMS

$ wget https://download.litecoin.org/litecoin-0.16.3/SHA256SUMS.asc

Check SHA256SUMS: all return OK

$ sha256sum --check SHA256SUMS.asc
litecoin-0.16.3-aarch64-linux-gnu.tar.gz: OK
litecoin-0.16.3-arm-linux-gnueabihf.tar.gz: OK
litecoin-0.16.3-i686-pc-linux-gnu.tar.gz: OK
litecoin-0.16.3-osx64.tar.gz: OK
litecoin-0.16.3-osx.dmg: OK
litecoin-0.16.3.tar.gz: OK
litecoin-0.16.3-win32-setup.exe: OK
litecoin-0.16.3-win32.zip: OK
litecoin-0.16.3-win64-setup.exe: OK
litecoin-0.16.3-win64.zip: OK
litecoin-0.16.3-x86_64-linux-gnu.tar.gz: OK

Verify if SHA256SUMs is signed with thrasher's key

$ gpg --verify SHA256SUMS.asc
gpg: Signature made Wed 19 Sep 22:33:42 2018 BST
gpg:                using RSA key FE3348877809386C
gpg: Good signature from "Adrian Gallagher <thrasher@addictionsoftware.com>" [full]

If all good - all binaries are 👌!