https://support.torproject.org/tbb/how-to-verify-signature/