On Tue, 2009-03-31 at 18:01 -0400, Robert P. J. Day wrote:
they don't look like normal 160-bit SHA1 values.
The file headers are misleading. The gpg signature used is a sha1 size,
but the checksum of the files themselves are actually sha256. Next time
we gpg sign checksum files we'll be sure to use a sha256 gpg signature.
--
Jesse Keating
Fedora -- Freedom² is a feature!
identi.ca:
http://identi.ca/jkeating