updated:2020-08: it is not easier than ever to find the correct public key. (thanks god! why so complicated f-droid?) md5 signatures could be forged, sha512sums imho not yet, but checking those crc checksums is straight forward, all one needs is … Continue reading once more: verify files with pgp – f-droid.org verify apk download gpg signature asc sig – md5sum and sha512sum linphone app