Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
md5sum issue
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Installing Gentoo
View previous topic :: View next topic  
Author Message
ts1971
n00b
n00b


Joined: 06 Oct 2012
Posts: 52

PostPosted: Sun Oct 07, 2012 12:18 am    Post subject: md5sum issue Reply with quote

Hi,

I recently downloaded the minimal install for adm64 and the checksums don't seem to match what's in the digests file. I'm almost sure that this is user error but I'd appreciate it if someone could straighten me out before I kick off the installation.

Here is the contents of the file

# SHA512 HASH
dcd2247006b8683497eebdd2bac9981b60c11ed9a948840ec27e8c33220c10d12a81896682dd6af2ef3fbfa0cc96fe4e722ea9c6328bb18cb8aec5dd9782698f install-amd64-minimal-20120917.iso
# WHIRLPOOL HASH
69b77fd238c14a1e8212c73adf9a881777781cab23780f1717cd31ba50f12a905a456c3e80fa644efe54251b7a74e7de7929f7f689ace03c0bc03dd0d8ac9c6b install-amd64-minimal-20120917.iso
# SHA512 HASH
2c9d8782d3cfeb1fb0413751a7fc6194146503594b762269c1fd6355373fda81a0798c153c4a5a741762238a2512e49528ac37ec1d0c832b5ce4a1f7aff3e869 install-amd64-minimal-20120917.iso.CONTENTS
# WHIRLPOOL HASH
c5a28f20621b24620fb7d4fe6fa6a04ec90527308338784c32595eaa1e8e29287efbb14d21712ea27f2b49870615e5a054b6347b2a2afa572fedc041c8d4fec5 install-amd64-minimal-20120917.iso.CONTENTS

and here's what I get when I check the md5sum:

C:\MyDownloads>md5sum install-amd64-minimal-20120917.iso
3710a48f28a2d02b072f702115d63861 *install-amd64-minimal-20120917.iso

You can see that that doesn't match either of the hash's in the file. I don't know much about this, but it occurs to me now that sha and md5 are different algorithms. The handbook implies that the md5s will be published. That should probably be updated. So, does anyone know where I can get a free command line program to generate the sha512 hashes on Windoews 7?

Thanks.
Back to top
View user's profile Send private message
Jaglover
Advocate
Advocate


Joined: 29 May 2005
Posts: 4635
Location: Saint Amant, Acadiana

PostPosted: Sun Oct 07, 2012 12:28 am    Post subject: Reply with quote

Welcome, ts1971!

I wouldn't worry about this. If that CD boots you are good to go. The security risk is very low if this is what you are concerned about. Nothing from install media will be part of your Gentoo install.
_________________
Please learn how to denote units correctly!
Back to top
View user's profile Send private message
erik258
Advocate
Advocate


Joined: 12 Apr 2005
Posts: 2650
Location: Twin Cities, Minnesota, USA

PostPosted: Sun Oct 07, 2012 12:37 am    Post subject: Reply with quote

Hi ,

So, would you expect your md5sum to match th SHA512 hash, or the BLOWFISH hash? :)

md5, sha, and blowfish are each different hash algorithms - with md5 probably being the worst. But, an md5 will never be the same as a sha512 or blowfish hash - as you can see, hash sizes are totally different.

I can't entirely with Jaglover. I haven't tested a hash of the gentoo isos in years (though I don't use them much anymore either, having more than enough systems already from which I can install). But nevertheless, checking the hashes on downloads is generally considered A Good Idea.

Anyway, 'ignore it' may be accurate but not an answer. Google suggests several options for sha sums in windows, though most seem to be based on the open source versions of the programs. I leave the rest on that subject as an exercise for you - if I wanted to be figuring out how to acquire missing "standard" utilities in winsows 7, I would be running windows 7. But if it makes you feel better (and if you don't trust the mirror, who am I to be trusted!?!):

Code:
dan@rachel ~/Downloads $ md5sum install-amd64-minimal-20120917.iso
3710a48f28a2d02b072f702115d63861  install-amd64-minimal-20120917.iso
dan@rachel ~/Downloads $ sha512sum install-amd64-minimal-20120917.iso
dcd2247006b8683497eebdd2bac9981b60c11ed9a948840ec27e8c33220c10d12a81896682dd6af2ef3fbfa0cc96fe4e722ea9c6328bb18cb8aec5dd9782698f  install-amd64-minimal-20120917.iso


The sha512 from the digest is a match against the same ISO that gives you your MD5, so as far as I'm concerned, you have the right file.
_________________
Configuring a Firewall? Try my iptables configuration
LinuxCommando.com is my blog for linux-related scraps and tidbits. Stop by for a visit!
Back to top
View user's profile Send private message
ts1971
n00b
n00b


Joined: 06 Oct 2012
Posts: 52

PostPosted: Sun Oct 07, 2012 4:18 am    Post subject: Reply with quote

Thanks for the replies. I found an sha512 generator on the internet and of course the hashes are fine. That little bit of the documentation - which includes even a link to an mda generator should probably be cleaned up.

Thanks again.

-ts1971
Back to top
View user's profile Send private message
iamben
Apprentice
Apprentice


Joined: 10 May 2004
Posts: 258

PostPosted: Mon Oct 08, 2012 2:10 pm    Post subject: Reply with quote

Just to give you closure on the issue, the handbooks are now updated with SHA512 & WHIRLPOOL digest instructions. The docs team knew the change was coming, but didn't know that it had hit the released stage3's yet.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Installing Gentoo All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum