What's inside the file hashes.txt.sig?

Question

I studied the monero-gui code and in the file monero-gui/src/qt/updater.cpp I found two addresses to verify binaries:

• https://web.getmonero.org/downloads/hashes.txt
• https://web.getmonero.org/downloads/hashes.txt.sig

The first file (hashes.txt) is in text format and it is clear to me that hashes and a digital signature are written there.

The second file (hashes.txt.sig) is in binary format. I have a question: what is this file and what utilities is it generated by?

Answer 1

what is this file...

hashes.txt.sig is a detached signature (from one of the projects maintainers) for the contents of hashes.txt.

and what utilities is it generated by?

GPG. E.g. gpg -b hashes.txt.