This may seem trivial, but for someone who knows little about this lebvel of security and wanting to really get it right first time, I found it quite offputting ... whereas the suggested process should be confidence-building, no?

============================================

URL: https://multibit.org/blog/2013/07/24/how-to-check-signatures.html

============================================

quoting:

Step 1 - SHA1 in action

The first step on the road to security is access to strong cryptography. We'll start by creating a simple one line text file:

$ echo "Hello world" > example.txt

The above has an expected SHA1 hash of 33ab5639bfd8e7b95eb1d8d0b87781d4ffea4d5d which we will now attempt to verify. Depending on your operating system you'll need to install a few applications in a particular order to establish a solid trust foundation. Windows - install FCIV

Microsoft's File Checksum Integrity Verifier (FCIV) is a command line tool that provides access to SHA1 checksums.

Once installed, you can test it out on your example file as follows

fciv.exe -sha1 example.txt

==================================

It was not clear to me precisely what the 'example.txt' file should contain. If I entered the supplied line into a DOS box it didn't seem to work (in terms of creating a text file). So I decided to create the text file myself.. Reading the line literally the text to include should be:

$ echo "Hello world" > example.txt

or maybe just: $ echo "Hello world"

or maybe just Hello world

?? Anyway, I tried loads of options and at no time could I get fciv.exe to generate the given key!! >8-(

Giving up after 30 mins I tried the quick brown fox test easily found in Wikipedia and it worked first time, so the software is working and it is something to do with the suggested text file.

Sorry if this seems pedantic but if even very simple things don't check out, then it does not help confidence.

Cheers.