md5sum issue

[ts1971]

Hi,

I recently downloaded the minimal install for adm64 and the checksums don't seem to match what's in the digests file. I'm almost sure that this is user error but I'd appreciate it if someone could straighten me out before I kick off the installation.

Here is the contents of the file

# SHA512 HASH
dcd2247006b8683497eebdd2bac9981b60c11ed9a948840ec27e8c33220c10d12a81896682dd6af2ef3fbfa0cc96fe4e722ea9c6328bb18cb8aec5dd9782698f install-amd64-minimal-20120917.iso
# WHIRLPOOL HASH
69b77fd238c14a1e8212c73adf9a881777781cab23780f1717cd31ba50f12a905a456c3e80fa644efe54251b7a74e7de7929f7f689ace03c0bc03dd0d8ac9c6b install-amd64-minimal-20120917.iso
# SHA512 HASH
2c9d8782d3cfeb1fb0413751a7fc6194146503594b762269c1fd6355373fda81a0798c153c4a5a741762238a2512e49528ac37ec1d0c832b5ce4a1f7aff3e869 install-amd64-minimal-20120917.iso.CONTENTS
# WHIRLPOOL HASH
c5a28f20621b24620fb7d4fe6fa6a04ec90527308338784c32595eaa1e8e29287efbb14d21712ea27f2b49870615e5a054b6347b2a2afa572fedc041c8d4fec5 install-amd64-minimal-20120917.iso.CONTENTS

and here's what I get when I check the md5sum:

C:\MyDownloads>md5sum install-amd64-minimal-20120917.iso
3710a48f28a2d02b072f702115d63861 *install-amd64-minimal-20120917.iso

You can see that that doesn't match either of the hash's in the file. I don't know much about this, but it occurs to me now that sha and md5 are different algorithms. The handbook implies that the md5s will be published. That should probably be updated. So, does anyone know where I can get a free command line program to generate the sha512 hashes on Windoews 7?

Thanks.

[Jaglover]

Welcome, ts1971!

I wouldn't worry about this. If that CD boots you are good to go. The security risk is very low if this is what you are concerned about. Nothing from install media will be part of your Gentoo install.

[erik258]

Hi ,

So, would you expect your md5sum to match th SHA512 hash, or the BLOWFISH hash? :)

md5, sha, and blowfish are each different hash algorithms - with md5 probably being the worst. But, an md5 will never be the same as a sha512 or blowfish hash - as you can see, hash sizes are totally different.

I can't entirely with Jaglover. I haven't tested a hash of the gentoo isos in years (though I don't use them much anymore either, having more than enough systems already from which I can install). But nevertheless, checking the hashes on downloads is generally considered A Good Idea.

Anyway, 'ignore it' may be accurate but not an answer. Google suggests several options for sha sums in windows, though most seem to be based on the open source versions of the programs. I leave the rest on that subject as an exercise for you - if I wanted to be figuring out how to acquire missing "standard" utilities in winsows 7, I would be running windows 7. But if it makes you feel better (and if you don't trust the mirror, who am I to be trusted!?!):

Code: Select all

dan@rachel ~/Downloads $ md5sum install-amd64-minimal-20120917.iso
3710a48f28a2d02b072f702115d63861  install-amd64-minimal-20120917.iso
dan@rachel ~/Downloads $ sha512sum install-amd64-minimal-20120917.iso
dcd2247006b8683497eebdd2bac9981b60c11ed9a948840ec27e8c33220c10d12a81896682dd6af2ef3fbfa0cc96fe4e722ea9c6328bb18cb8aec5dd9782698f  install-amd64-minimal-20120917.iso

The sha512 from the digest is a match against the same ISO that gives you your MD5, so as far as I'm concerned, you have the right file.

[ts1971]

Thanks for the replies. I found an sha512 generator on the internet and of course the hashes are fine. That little bit of the documentation - which includes even a link to an mda generator should probably be cleaned up.

Thanks again.

-ts1971

[iamben]

Just to give you closure on the issue, the handbooks are now updated with SHA512 & WHIRLPOOL digest instructions. The docs team knew the change was coming, but didn't know that it had hit the released stage3's yet.