You can use gpg on windows or macosx as well to verify the signed hashes.<p>As linked in the blog post in my other comment, tails explains things quite well:<p><a href="https:&#x2F;&#x2F;tails.boum.org&#x2F;download&#x2F;index.en.html#verify" rel="nofollow">https:&#x2F;&#x2F;tails.boum.org&#x2F;download&#x2F;index.en.html#verify</a>