[issue1348] ISO file hash mismatch

HacKan bts at bts.grml.org
Mon Apr 27 04:34:07 CEST 2015


New submission from HacKan <hackan at gmail.com>:

Hello!
I downloaded the ISO grml96-full_2014.11.iso from the torrent I got
here: https://grml.org/download/
(http://download.grml.org/grml96-full_2014.11.iso.torrent), and then
check the hash with the one found here:
http://download.grml.org/grml96-full_2014.11.iso.sha1.asc

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256

ea7204ed77fa3df3a4ed68e3b8e2ad6f95d5242d  grml96-full_2014.11.iso

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1
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=6L94

-----END PGP SIGNATURE-----

First I checked the signature, which was OK. Then I run sha256sum on my
file and got:

hackan at hc-vision-black:/mnt/Downloads/Downloads/0Utils/Linux/grml$ sha256sum grml96-full_2014.11.iso

d3330229a69f52ec00d6023fa3241bb43a29f5ebb29c7e518cdb3585ee9a0cae  grml96-full_2014.11.iso


which is different! this is either really bad or just a small mistake.
what happened?

EDIT:
crap, just as i was writing this, i realised that it was a SHA1 hash,
not a SHA256 one as the file says:

hackan at hc-vision-black:/mnt/Downloads/Downloads/0Utils/Linux/grml$ sha1sum grml96-full_2014.11.iso

ea7204ed77fa3df3a4ed68e3b8e2ad6f95d5242d  grml96-full_2014.11.iso


which is fine. however, the file should read Hash: SHA1 instead of SHA256


Regards,
-- 
/HacKan/, CEO *HacKan & CuBa Co.* http://www.hackan.com.ar

----------
files: smime.p7s, unnamed
messages: 4947
nosy: hackan
status: unread
title: ISO file hash mismatch

_____________________________________
GRML issue tracker <bts at bts.grml.org>
<http://bts.grml.org/grml/issue1348>
_____________________________________
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://ml.grml.org/pipermail/bugs-changes/attachments/20150427/93f7c3d2/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5912 bytes
Desc: not available
URL: <http://ml.grml.org/pipermail/bugs-changes/attachments/20150427/93f7c3d2/attachment.bin>


More information about the Bugs-changes mailing list