Download for Windows and macOS

Signatures

GPG signatures are a proof that distributed files have been signed by the owner of the signing key. For example, if this website was compromised and the original Electrum-DOI files had been replaced, signature verification would fail, because the attacker would not be able to create valid signatures. (Note that an attacker would be able to create valid hashes, this is why we do not publish hashes of our binaries here, it does not bring any security).

In order to be able to verify GPG signatures, you need to import the public key of the signer. Electrum-DOI binaries are signed with Lena Stallinger’s public key. On Linux, you can import that key using the following command: gpg –import LenaStallinger.asc. Here are tutorials for Windows. When you import a key, you should check its fingerprint using independent sources, such as here, or use the Web of Trust.

Notes for Windows users

Electrum-DOI binaries are often flagged by various anti-virus software. There is nothing we can do about it, so please stop reporting that to us. Anti-virus software uses heuristics in order to determine if a program is malware, and that often results in false positives. If you trust the developers of the project, you can verify the GPG signature of Electrum-DOI binaries, and safely ignore any anti-virus warnings. If you do not trust the developers of the project, you should build the binaries yourself, or run the software from source. Finally, if you are really concerned about malware, you should not use an operating system that relies on anti-virus software.

Lena Stallinger OpenPGP (primary):
6694 D8DE 7BE8 EE56 31BE D950 2BD5 824B 7F94 70E6   (download public key)

You can download the signatures from this repo:
https://github.com/Doichain/electrum-doi-signatures/tree/main/4.1.4