我正在尝试按照说明在此处验证下载的文件：
http://www.pps.univ-paris-diderot.fr/~jch/software/pgp-validating.html
获取签名密钥的本地副本
您需要知道要确认的密钥的密钥 ID。如果您使用的是 ASDF-Install，ASDF-Install 将抱怨未知密钥，并告诉您 ID。否则，下载 tarball 和签名文件，并将签名文件传递给 GnuPG：
gpg cl-yacc-0.2.tar.gz.asc GnuPG will complain about an unknown key, and tell you the ID. At that point, do gpg --recv id to download a local copy of the key.
我正在尝试验证下载的文件：
libevent-2.0.22-stable.tar.gz
我有这个签名文件：
libevent-2.0.22-stable.tar.gz.asc
按照上面的步骤，这就是我得到的：
~/Downloads$ gpg libevent-2.0.22-stable.tar.gz.asc
gpg: assuming signed data in 'libevent-2.0.22-stable.tar.gz'
gpg: Signature made Mon Jan 5 08:16:20 2015 MST using RSA key ID 8D29319A
gpg: Good signature from "Nick Mathewson <nickm@alum.mit.edu>" [unknown]
gpg: aka "Nick Mathewson <nickm@wangafu.net>" [unknown]
gpg: aka "Nick Mathewson <nickm@freehaven.net>" [unknown]
gpg: aka "[jpeg image of size 3369]" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: B35B F85B F194 89D0 4E28 C33C 2119 4EBB 1657 33EA
Subkey fingerprint: EF00 F369 1387 FCC5 8CD6 8E13 9103 97D8 8D29 319A
~/Downloads$ gpg --recv 8D29319A
gpg: requesting key 8D29319A from hkps server hkps.pool.sks-keyservers.net
gpg: key 165733EA: "Nick Mathewson <nickm@alum.mit.edu>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1
接下来，它说：
从独立来源确认密钥
您现在需要确认来自独立来源的密钥，即既不是签名文件也不是密钥服务器。
了解更多关于钥匙的信息
有了您感兴趣的密钥的 ID，在您最喜欢的密钥服务器界面上检查密钥（选择“详细索引”）。您将找到签署密钥的人以及签署该密钥的人的所有 uid（电子邮件地址）。
据我所知，带有您感兴趣的密钥 ID 的短语是指：8D29319A. 无论如何，我尝试在该链接的密钥服务器界面中输入每个数字、指纹和 ascii 装甲公钥，但我只是在一个又一个异常中得到异常。
我究竟做错了什么？
$ gpg --version
gpg (GnuPG/MacGPG2) 2.0.28
libgcrypt 1.6.3
Copyright (C) 2015 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Home: ~/.gnupg
Supported algorithms:
Pubkey: RSA, RSA, RSA, ELG, DSA
Cipher: IDEA, 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH,
CAMELLIA128, CAMELLIA192, CAMELLIA256
Hash: MD5, SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224
Compression: Uncompressed, ZIP, ZLIB, BZIP2
$