Verify the Integrity of your Software Download V5.5 Build 013

TYPE FILENAME FILE SIZE
Windows SecurITree-setup.exe 100,631,144 bytes
UNIX/Linux securitree.deb 86,900,484 bytes
Mac OS X M-chip SecurITree-mchip.pkg 94,349,577 bytes
Mac OS X Intel SecurITree-intel.pkg 95,529,313 bytes

The integrity of Amenaza's SecurITree program can be confirmed in three ways. The first method uses the SHA-1 algorithm specified by NIST in FIPS 180-1 to compute a cryptographic hash or message digest of downloaded files.

SHA-1 Checksums:

TYPE FILENAME SHA-1 CHECKSUM
Windows SecurITree-setup.exe 0c17e877cc75d10664333c1d6795e73e8077d26c
UNIX/Linux securitree.deb f66b7592ed6d18339e92b780a4565b95de3d4c46
Mac OS X M-chip SecurITree-mchip.pkg fd1c7101edc7395b0a27d9e34e398195eacb84a4
Mac OS X Intel SecurITree-intel.pkg ab81f688f2578351b6134c19fa23eefdb7a2b355

Programs to compute and verify SHA-1 hashes are widely available. This makes it convenient for verifying that tampering of files has not occurred.

SHA-256 Checksums:

TYPE FILENAME SHA-256 CHECKSUM
Windows SecurITree-setup.exe 83574c7a4b40f9e22514bafde11d0a41daab026f96d8d77696f2e47a3a9b1771
UNIX/Linux securitree.deb 2f74b5963b163a3926738af9bf7339d4e6e7bd74016d0c89a9691e71dafbb5dd
Mac OS X M-chip SecurITree-mchip.pkg b5ac10c9317930c79b3282646040f24cda8220fd7ace26117a314cc09a580c0d
Mac OS X Intel SecurITree-intel.pkg 75e98a1bea54427e6ae9c512a95ad41da0c04b2fe4378586ffb16dc72dcd46f7

These methods are not a 100% guarantee of integrity. If Amenaza's web server has been compromised it is possible that the intruder may have introduced viruses, worms, Trojan Horses or other malware into the downloadable files and then posted matching SHA-1 message digests on the website! The next integrity verification mechanism described below is a stronger guarantee of file integrity and should be used if SecurITree will be used in a sensitive environment or if there is any suspicion that the downloaded code has been compromised.

The downloadable files have been digitally signed using Pretty Good Privacy (PGP) software and/or GNU Privacy Guard. This software is available commercially from https://www.openpgp.org/ or as freeware from https://www.gnupg.org.

PGP Signature Files:

TYPE FILENAME PGP SIGNATURE FILES
Windows SecurITree-setup.exe SecurITree-setup.exe.asc
UNIX/Linux securitree.deb securitree.deb.asc
Mac OS X M-chip SecurITree-mchip.pkg SecurITree-mchip.pkg.asc
Mac OS X Intel SecurITree-intel.pkg SecurITree-intel.pkg.asc

The public half of the Amenaza Software signing key pair can be obtained from the PGP keyserver (https://keyserver.pgp.com) using the PGP Key Management utility. Search for "Amenaza Technologies Limited Software Signing Key" or "support@amenaza.com". Note that this site cannot be queried using the LDAP utility built into most browsers.

Since the private half of the Amenaza Software signing key pair used to sign the files is not stored on the Amenaza web server it is NOT possible for an intruder to create a valid signature file even if they compromise the web server. It is, however, possible that the PGP key server may have had the Amenaza Software signing key replaced by a rogue key.

If you are operating in a sensitive environment we recommend that you contact Amenaza Technologies at 1-888-949-9797 (1-403-263-7737) to verify the signing key fingerprint in an 'Out of Band' manner.

Amenaza Software Signing Key Fingerprint:

AE31 1695 86F5 BF87 0384 5314 D4F9 ABC2 D654 5B79

OR

robust company backward Montana
necklace visitor slingshot liberty
acme Jupiter dwelling belowground
steamship Waterloo rhythm repellent
stockman equation erase inertia

License Manager Files:

Windows:

File Name SecurITreeLicenseManager.exe
File Size 52,692,320 bytes
SHA-1 Checksum d48e03e21e68ac96030c14ddd069cdc77f82e22e
SHA-256 Checksum 6e5496014660ee16507444f2768bb658b740d05aed89a9bf139e45c1bacd90f0
PGP Signature SecurITreeLicenseManager.exe.asc

Unix:

File Name amenazalicmgr_v5.deb
File Size 48,057,496 bytes
SHA-1 Checksum c11bf083b4753a810a5da3335f6210d606b74bfe
SHA-256 Checksum 7002fc95cda52aad1cfb359bb13907ff7111523bb28759a7245d0f27f48da001
PGP Signature amenazalicmgr_v5.deb.asc