LinuxQuestions.org
Latest LQ Deal: Linux Power User Bundle
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 04-03-2014, 09:45 AM   #1
NotionCommotion
Member
 
Registered: Aug 2012
Posts: 536

Rep: Reputation: Disabled
How important is it to check hashes or PGP/ASC signatures for file integrity?


How important is it check file integrity when downloading a file from the Internet?

Are there some files which are more important to check than others? For instance, downloading initial Linux operating system, downloading Apache, etc?

Also, does checking MD5 or SHA256 hashes perform the same basic task as verifying PGP/ASC signatures?

Thank you
 
Old 04-04-2014, 03:04 AM   #2
cliffordw
Member
 
Registered: Jan 2012
Location: South Africa
Posts: 481

Rep: Reputation: 179Reputation: 179
Hi,

I think it is very important to check the integrity of all files. I've often found corrupt or partial downloads, and these could cause problems if the bad download is not detected. For software downloads, in some cases the problem will manifest itself in other ways early enough, and the installation will fail. In other cases the installation may succeed, but the software may behave in unexpected behaviour, which is very difficult / impossible to troubleshoot.

My 2c :-)
 
Old 04-04-2014, 03:20 AM   #3
astrogeek
Moderator
 
Registered: Oct 2008
Distribution: Slackware [64]-X.{0|1|2|37|-current} ::12<=X<=14, FreeBSD_10{.0|.1|.2}
Posts: 3,876
Blog Entries: 1

Rep: Reputation: 1997Reputation: 1997Reputation: 1997Reputation: 1997Reputation: 1997Reputation: 1997Reputation: 1997Reputation: 1997Reputation: 1997Reputation: 1997Reputation: 1997
Quote:
Originally Posted by NotionCommotion View Post
How important is it check file integrity when downloading a file from the Internet?
Only as important as the integrity of your system, data and time are to you.

Quote:
Originally Posted by NotionCommotion View Post
Are there some files which are more important to check than others? For instance, downloading initial Linux operating system, downloading Apache, etc?
No.

Quote:
Originally Posted by NotionCommotion View Post

Also, does checking MD5 or SHA256 hashes perform the same basic task as verifying PGP/ASC signatures?

Thank you
Not exactly. Checking the hashes checks the integrity of the contents of the file. Checking PGP primarily verifies that the file came from the expected source (but also validates file integrity).

Last edited by astrogeek; 04-04-2014 at 03:21 AM.
 
Old 04-04-2014, 09:43 AM   #4
NotionCommotion
Member
 
Registered: Aug 2012
Posts: 536

Original Poster
Rep: Reputation: Disabled
Thank you cliffordw and astrogeek,

Just stared doing a new install, and based on your recommendations, I am going to start over and be sure to check every download.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
file integrity check packets Linux - Security 4 08-18-2010 10:11 PM
PGP signatures. stf92 Linux - Software 6 08-13-2010 12:30 AM
PGP signatures. stf92 Slackware 7 08-09-2010 12:41 PM
Quick question - PGP checksums? *.asc Ranguvar Linux - General 4 11-19-2008 03:21 PM
File Integrity Check of Proftpd linuxsrc Linux - Software 2 03-04-2008 08:24 PM


All times are GMT -5. The time now is 11:40 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration