Good job phantomcircuit.
I can confirm these binaries are legit. Signed using my GPG key:
http://www.bitcoin.org/genjix.gpggenjix:/tmp$ sha256sum bitcoin-linux.tar.bz2a93d047877806e12ed6a83f0cd5894d5dd6381dccc6c54bd85afa5e74a75b0c0 bitcoin-linux.tar.bz2
genjix:/tmp$ gpg --clearsign <<< a93d047877806e12ed6a83f0cd5894d5dd6381dccc6c54bd85afa5e74a75b0c0
You need a passphrase to unlock the secret key for
user: "genjix <genjix@riseup.net>"
2048-bit RSA key, ID 634FEC67, created 2010-11-05
gpg: gpg-agent is not available in this session
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
a93d047877806e12ed6a83f0cd5894d5dd6381dccc6c54bd85afa5e74a75b0c0
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iQEcBAEBAgAGBQJN6AYnAAoJEH8nvZxjT+xn1R8H/AovGZ7hnnQsdZ5NAA4DlmOZ
Ke6HX8z6Jc4TZ4rMnrBikzk4yw2VPk0m1uf2GWjmo8oD2FuCEvlZxrnuHpnlnOee
/SZt87HlgCJ++oBGL0aNSXrqfkkAchVUddY7awGbw2GxU13gO9bWeUgdNOb1sVs6
RGNA80jzdwfpb9z0LpejF9laLMAxGad63RHUWMyEC6kAVJFg4y0a/CAgaNPbEJCJ
DIW/WC/8LUn4jX4rzX2fmW+S+LkIHw66jW1c9RPAQ9JUoRI/vqE9giadqyLcxd7A
XOytfefxGe/rjKw4ukJxU7dJipp3x2C1RSRDNWYkfT2zEde1ZRmyohRdYb5yuS8=
=/r/a
-----END PGP SIGNATURE-----
genjix:/tmp$ sha256sum bitcoin-windows.zip
2165ddc4e370b0e79a767a1fd9791aa5f4ed5a0d4a4fc9195dd542b5b1002775 bitcoin-windows.zip
genjix:/tmp$ gpg --clearsign <<< 2165ddc4e370b0e79a767a1fd9791aa5f4ed5a0d4a4fc9195dd542b5b1002775
You need a passphrase to unlock the secret key for
user: "genjix <genjix@riseup.net>"
2048-bit RSA key, ID 634FEC67, created 2010-11-05
gpg: gpg-agent is not available in this session
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
2165ddc4e370b0e79a767a1fd9791aa5f4ed5a0d4a4fc9195dd542b5b1002775
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iQEcBAEBAgAGBQJN6AZAAAoJEH8nvZxjT+xnt54IAJiBbaYRaQmjLJWwHGtmuh3c
s/0m+v1vPC9QBOM0Usl5FDEnpNlqZR4d7OM7LlSle4H1+go/jv/0yu9MxWLhVGlT
s4G4LahYjHDpjtaVtzuBybyoQqE6WC7pZxZaTkpvHmfLP67Q70dOVSW4OzSQPXHz
nNQ2Bdjoby/VtbPmU24lToUqD6FOPWtmpVZ8SyRK3fe3+WH9dgqQ/0n8Eenr0hY5
nKoImyxxEGdpMovoZMznxK+efRj1oD1Y62Myv0NOa8OuXAHVsvqm8LLVDZvQW+Kt
y+zJ1z78HOioB963Zoh7cGPJ3MV2lvjIW5T+plNNHEh9xjhUXwKDy/+TybE2NaI=
=OWoL
-----END PGP SIGNATURE-----