if you would include the link you are using
so that others can check it
then we might be able to help
we do not know if the sig is even for the current version
nor if that is the version you are trying to check
nor what operating system
I am guessing you are using Archlinux
but what 32 bit or 64 bit ?
from
http://www.truecrypt.org/downloads
for
truecrypt-7.1a-linux-x64.tar.gz
truecrypt-7.1a-linux-x64.tar.gz.sig
did you READ the WARNING pop up on the download ?
Quote:
Note: In the past, many users reported that our public key was invalid, even though it was actually valid. When verifying the signature, if you receive an error message stating that the signing key is invalid, you need to sign our public key with your private key first (then the error message will no longer appear).
In other words, the "Invalid Key" error message does NOT mean that our key is actually invalid (you just need to sign the key, after you add it to your keyring, in order to mark the key as trusted). That's how PGP and GPG work.
|
did you add it to your keyring ?
and did you READ the Arch wiki?
https://wiki.archlinux.org/index.php/TrueCrypt
and install the truecript repo
and install truecrypt
THE ARCH WAY !!! with packman