-
erciccione authoredIn preparation for the deployment of getmonero as hidden service
erciccione authoredIn preparation for the deployment of getmonero as hidden service
{% assign version = '1.1.0' | split: '.' %} {% include disclaimer.html translated="false" version=page.version %}
Verify Binaries: Windows (Beginner)
Verification of the Monero binary files should be done prior to extracting, installing, or using the Monero software. This is the only way to ensure that you are using the official Monero binary. If you receive a fake binary (eg. phishing, MITM, etc.), following this guide will protect you from being tricked into using it.
To protect the integrity of the binaries the Monero team provides a cryptographically signed list of all the SHA256 hashes. If your downloaded binary has been tampered with it will be produce a different hash than the one in the file.
This is a beginners guide for the Windows operating system and will make use of GUIs almost exclusively. It will walk you through the process of installing the required software, importing the signing key, downloading the necessary files, and finally verifying that your binary is authentic.
Table of Contents
1. Gpg4win Installer
2. Import Signing Key
3. Verify Hash File
4. Verify Binary File
1. Using Gpg4win Installer
This section will cover installing the cryptography software. Windows does not come with the tools required to verify your binary. To install these tools you can use the Gpg4win installer.
1.1. Getting Gpg4win Installer
1.1.1. Download Gpg4win
In a web browser, go to gpg4win.org and download the installer by clicking the green button.
You will be taken to a donation page. If you do not wish to donate select $0, then you will be able to click Download.
Click Save File.
Choose a download location, click Save.
1.1.2. Launch Gpg4win
When the download is finished, open the containing folder.
Double click the downloaded gpg4win executable to launch.
1.2. Use Gpg4win Installer
You will be presented with a security verification screen, click Run.
Select your language, click OK.
A welcome screen will appear, click Next.
Now you will see the component selection screen, you must at least leave Kleopatra checked for this guide. Make your selections, click Next.
It is best to leave the default installation location unless you know what you are doing. Make your selections, click Install.
Installation has completed, click Next.
Click Finish.
2. Monero Signing Key
This section will cover downloading the Monero signing key, verifying that the key is correct, and then importing the key to your keyring. The hash file that will be used to verify your binary is cryptographically signed with the Monero signing key. In order to check the validity of this file you must have the public version of the signing key.
2.1. Download Signing Key
In a web browser, go to Fluffypony's GPG key, which he uses for signing the Monero binaries. Right click on the page, choose Save Page As.
Leave the default location, click Save.
2.2. Initialize Kleopatra
If this is your first time using Kleopatra you will have to create a key pair for yourself.
Launch Kleopatra.
2.2.1. Import Signing Key
Click Import.
Enter the directory Downloads, select fluffypony, and click Open.
Start the process of certifying the key by clicking Yes.
2.2.2. Create Key Pair
Start the process of key creation by clicking Yes.
Fill in some details for Name and Email, click Next.
Verify details, click Create.