BitcoinIII

BitcoinIII · Downloads

Downloads

BC3-related Software Downloads

Back to Homepage

Release signing key

Know what you are running.

OpenPGP

bc3dev@proton.me

Full primary-key fingerprint

59E9AF650394E29E74FF747304BC38ABBE9FA61D

Import by fingerprint

gpg --keyserver hkps://keys.openpgp.org --recv-keys 59E9AF650394E29E74FF747304BC38ABBE9FA61D

Or locate by email address

gpg --keyserver hkps://keys.openpgp.org --auto-key-locate keyserver --locate-keys bc3dev@proton.me

Whichever method you use, compare the full primary-key fingerprint with one obtained through an independent, trusted channel. An email lookup finds a key; it does not replace fingerprint verification.

Release builds

BitcoinIII-Core v31.1.3

BC3Hash + aserti9-2d

Each signature button downloads a detached .sig for the file beside it. Keep both files in the same directory and follow the verification steps below. These are node and wallet builds; GPU mining uses separate software.

Before you run a release

Verify the signature.

Check the primary fingerprint

After importing the key with either command above, inspect its full fingerprint:

gpg --fingerprint --with-subkey-fingerprint bc3dev@proton.me

Match the primary-key fingerprint to the trusted fingerprint. A release may be signed by a signing subkey; that subkey must belong to the primary key you have verified.

Verify the file you downloaded

From the directory containing the file and its signature, run:

gpg --verify <file>.sig <file>

Replace both <file> placeholders with the complete filename, including its extension.

Check the result before using the release

Require a Good signature from the verified key or one of its valid signing subkeys. Do not proceed with a bad signature, a different signer, or unresolved expiry or revocation warnings.

A warning that the key is “not certified with a trusted signature” concerns GnuPG's local identity-trust settings. It is not a bad file signature, but you must still establish the correct fingerprint independently. Do not mark a key ultimately trusted merely to suppress that warning.

See keys.openpgp.org GnuPG instructions and the GnuPG manual.

Back to Homepage