Skip to content
Plebum Dominium

05 · Plebum Dominium

Check the files

First work. Exact files, the fingerprint, and when to delete a download.

Download PDF

You are here before anything is copied to a USB. A hash is the file’s fingerprint. A signature is the project saying that fingerprint is theirs. If either check fails, delete the file and download it again. A bad file means the funds are bad.

The files this kit checks

  • Tails 7.13. The file is tails-amd64-7.13.img or tails-amd64-7.13.iso. From tails.net only. Wait until that page says the check passed.
  • Sparrow 2.5.5. For Tails, sparrowwallet-2.5.5-x86_64.tar.gz. A newer download will not match. That is a stop, not an upgrade. The Windows or Mac installer is only for the computer that watches.
  • Electrum 4.8.2. The file is electrum-4.8.2-x86_64.AppImage. From electrum.org. Not a look-alike page.
  • Ian Coleman. Save bip39-standalone.html from the official GitHub repo. Open it only while offline.
  • The dice converter is already in this kit. Its fingerprint is in VERIFY.md.

Compare the fingerprint

Open one window, paste one line, and compare the result to the fingerprint on the project’s own site. Every character. One difference means delete the file.

Windows. Start menu, PowerShell.

$ cd 
$ Get-FileHash .\filename -Algorithm SHA256

Type cd, a space, then drag the folder in. Press Enter. Then paste the second line with the real file name.

Mac. Spotlight, Terminal.

$ cd 
$ shasum -a 256 filename

Then the kit check

Put the downloads next to verify_kit.sh. It checks the pinned fingerprints. It does not check signatures. One failure means stop. Do not copy that file.

$ chmod +x verify_kit.sh
$ ./verify_kit.sh

Later, two tools must agree

  • The same dice bits must print the same 24 words in the converter and in the offline Ian Coleman page.
  • The same seed must show the same first addresses in Sparrow and Electrum. If they differ, stop.
  • The descriptor, imported with no seed, must show those same addresses.
  • Before you sign, both tools must show the same destination, amount, change, and fee.

Next. Two boots. Flash Tails only after this page is done.