To verify the download integrity of putty, how is the best way to first verify the "SHA-512: (RSA sig) | (DSA sig)" PGP signature of these check-sum files for putty? (I am guessing "sig" means signed.)
From the putty download page:
MD5: md5sums (or by FTP) (RSA sig) (DSA sig) SHA-1: sha1sums (or by FTP) (RSA sig) (DSA sig) SHA-256: sha256sums (or by FTP) (RSA sig) (DSA sig) SHA-512: sha512sums (or by FTP) (RSA sig) (DSA sig)
When I open the downloaded DSA sig file with a text editor, the first line is "-----BEGIN PGP SIGNED MESSAGE-----".
So I went to the PGP site and drilled down into what looked like the latest version for windows PGP 8.0. But it clicked me into the Symantec site where they sell products "Powered by PGP Technology" which doesn't look like what I am looking for.
So what is the best way to verify these check-sum PGP signatures these days?
Thanks in advance for your help.
- I need putty for SSH logins to my website host.
- The other available versions of PGP seem quite old.