'This is just the original 0.8.4 package. The 'a' was added after version number in the package file just to make sure it's not confused with the backdoored version.' *) same checksum as non-backdoored version *) gpg signature/fingerprint verified *) I suck