Verifying Signatures

Vidalia Packages

1. Source Tarball and Vidalia-only Win32 Packages
2. Win32 and OS X Bundles (Vidalia/Tor/Privoxy/Torbutton) and Vidalia-only OS …
3. Red Hat Packages

Vidalia source and binary packages are signed with PGP signatures, so you can verify that the file you have downloaded is the one we intended you to get. See the Tor wiki for more information on verifying package signatures.

This page lists the people who create each package and the public key ID and fingerprint you should use to verify downloaded packages.

---

Source Tarball and Vidalia-only Win32 Packages

Packager: Matt Edman
Public Key ID: 5FA14861

gpg --keyserver subkeys.pgp.net --recv-keys 0x5FA14861

Fingerprint

pub   1024D/5FA14861 2005-08-17
      Key fingerprint = 9467 294A 9985 3C9C 65CB  141D AF7E 0E43 5FA1 4861
uid                  Matt Edman <edmanm@rpi.edu>
uid                  Matt Edman <edmanm2@cs.rpi.edu>
uid                  Matt Edman <edmanm@vidalia-project.net>

---

Win32 and OS X Bundles (Vidalia/Tor/Privoxy/Torbutton) and Vidalia-only OS X Packages

Packager: Andrew Lewman
Public Key ID: 31B0974B

gpg --keyserver subkeys.pgp.net --recv-keys 0x31B0974B

Fingerprint

pub   1024D/31B0974B 2003-07-17
      Key fingerprint = 0295 9AA7 190A B9E9 027E  0736 3B9D 093F 31B0 974B
uid                  Andrew Lewman (phobos) <phobos@rootme.org>

---

Red Hat Packages

Packager: Oliver Niesner
Public Key ID: 92CD84D7

gpg --keyserver subkeys.pgp.net --recv-keys 0x92CD84D7

Fingerprint

pub   1024D/92CD84D7 2004-12-22
      Key fingerprint = EF9B 70C5 7CC5 3882 C34C  647C EF6E 192F 92CD 84D7
uid                  Oliver Niesner <digi_news@gmx.de>