These were generated on Jun 2, 2014. Copy and paste these values to your favorite md5sum / sha1sum checker, or verify by your eyeballs. The purpose of this page is to provide some assurance that what you think you downloaded is actually what was intended by the maintainers of http://defcoin.org, since HTTP connections to DNS-resolved web servers can be a little dicey, depending on your network.
| Link | URL |
|---|---|
| Main | http://defcoin.org/ |
| OSX | http://defcoin.org/defcoin-qt-osx.dmg |
| Linux | http://defcoin.org/defcoin-0.22.0-linux-amd64.tar.gz |
| Windows | http://defcoin.org/defcoin-0.22.2-win32.zip |
todb@mazikeen:/tmp/defcoin-bins
$ md5sum *
a67f9ee90561fb317a9e6c5ce9033bb1 defcoin-0.22.0-linux-amd64.tar.gz
b04439d774226bb2ea032b3722d107bd defcoin-0.22.2-win32.zip
a5623abbe455d633eafa81a4efbd24ce defcoin-qt-osx.dmg
todb@mazikeen:/tmp/defcoin-bins
$ sha1sum *
51dad71617267c4743ad5335d191fd2a4c3909b2 defcoin-0.22.0-linux-amd64.tar.gz
d89234ddd62070b107341053c746e7f8c5ad0d45 defcoin-0.22.2-win32.zip
6c8972e1fa2fa016458914e57d30e0251c302798 defcoin-qt-osx.dmg
If you don't trust my GitHub 2FA-backed account credentials, but you do trust my PGP key that I use to sign commits to my GitHub projects (like Metasploit), then here you go.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
MD5sum:
a67f9ee90561fb317a9e6c5ce9033bb1 defcoin-0.22.0-linux-amd64.tar.gz
b04439d774226bb2ea032b3722d107bd defcoin-0.22.2-win32.zip
a5623abbe455d633eafa81a4efbd24ce defcoin-qt-osx.dmg
SHA1sum:
51dad71617267c4743ad5335d191fd2a4c3909b2 defcoin-0.22.0-linux-amd64.tar.gz
d89234ddd62070b107341053c746e7f8c5ad0d45 defcoin-0.22.2-win32.zip
6c8972e1fa2fa016458914e57d30e0251c302798 defcoin-qt-osx.dmg
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iQEcBAEBAgAGBQJTjLATAAoJEB7/toKtufGTsSQH/RRMJ0QZGfWgmK7fWEE9kyXt
UfIHM3sn5IFOOdNEPXRawry+evuH3Zi6NqFOXCHeHjHpMWsbPC/k1q5ZujcPYScu
bi8Ap/HA9Iqt/AmY70woJU2Z8V2LJ5l/XnhUpzy194PEQXId/QmHfaK2/9vO+Kdf
fdIipB8y7gPfzMt9b88SyMz4E6l2GlJbOiz011PBRwUA0LZET5X7u6G32AR0bzTs
zmz61K4yl+lmIZ5+Sv4WzSmDCjQF8nI6ROQfM0kb4iFblkWeHE0yfjJOuuM87Ix/
a0BlMYgwHVgIX8CAz62JYWpW1y2Im5o/Ywyv8Y1ORLkWJn15lTmyIKaZCFitup4=
=Znzh
-----END PGP SIGNATURE-----
Note, this is all initially based on my own downloading. I've asked @defcoin to confirm this via Twitter, which s/he did for the MD5sums -- just see the thread there. These have also been reflected on the subreddit, /r/defcoin.
Incidentally, if you happen to try my mirror links with SSL, you will notice the keys are quite unsafe. This is for another, unrelated project. In any event, the HTTPS certificate should be considered completely compromised, so it's just as safe as HTTP. That's why you check the checksums after downloading.