Brewgod23
Posts: 8
Joined: Wed Oct 31, 2012 5:40 pm

Raspbian Hash

Sat Jan 05, 2013 8:25 am

I am using Win32DiskImager and I select the MD5 Hash and I get f42b8a048d65cecd6ccb58ebdc8f533 but the download page says SHA-1 should be 514974a5fcbbbea02151d79a715741c2159d4b0a. Is MD5 and SHA-1 the same thing? Is the MD5 Hash given by Win32DiskImager correct? I also tried the other OS from the download page and I don't get a match between the MD5 and SHA-1. Thanks for your help.

User avatar
jojopi
Posts: 3233
Joined: Tue Oct 11, 2011 8:38 pm

Re: Raspbian Hash

Sat Jan 05, 2013 8:49 am

MD5 and SHA-1 are different hash algorithms and will always produce different results. MD5 is a 128 bit hash which is 32 hexadecimal digits, and SHA-1 is 160 bits or 40 digits.

f42b8a048d65ceced6ccb58ebdc8f533 is the md5sum for 2012-12-16-wheezy-raspbian.img, so your download is correct.

But if you are very concerned about security you should not take my word for that. The cryptographic hash is intended to verify that nobody has tampered with the image. So you should check it against the algorithm and value published by the Foundation only. Also note that the published hash is for the .zip file, not the .img.

Brewgod23
Posts: 8
Joined: Wed Oct 31, 2012 5:40 pm

Re: Raspbian Hash

Sun Jan 06, 2013 6:58 am

If the site recommends to use Win32DiskImager and this uses MD5 why doesn't the site also publish the MD5 hash with SHA-1 hash? Just a thought. Thanks for the explanation.

Return to “Raspberry Pi OS”