个人工具

“UbuntuHelp:HowToMD5SUM”的版本间的差异

来自Ubuntu中文

跳转至: 导航, 搜索
第1行: 第1行:
 
{{From|https://help.ubuntu.com/community/HowToMD5SUM}}
 
{{From|https://help.ubuntu.com/community/HowToMD5SUM}}
 
{{Languages|UbuntuHelp:HowToMD5SUM}}
 
{{Languages|UbuntuHelp:HowToMD5SUM}}
 
 
 
The program '''''md5sum''''' is designed to verify data integrity using the MD5 (Message-Digest algorithm 5) 128-bit cryptographic hash. MD5 hashes used properly can confirm both file integrity and authenticity.
 
The program '''''md5sum''''' is designed to verify data integrity using the MD5 (Message-Digest algorithm 5) 128-bit cryptographic hash. MD5 hashes used properly can confirm both file integrity and authenticity.
 
 
In terms of integrity, an MD5 hash comparison detects changes in files that would cause errors. The possibility of changes (errors) is proportional to the size of the file; the possibility of errors increase as the file becomes larger. It is a very good idea to run an MD5 hash comparison check when you have a file like an operating system install CD that has to be 100% correct.
 
In terms of integrity, an MD5 hash comparison detects changes in files that would cause errors. The possibility of changes (errors) is proportional to the size of the file; the possibility of errors increase as the file becomes larger. It is a very good idea to run an MD5 hash comparison check when you have a file like an operating system install CD that has to be 100% correct.
 
 
In terms of security, cryptographic hashes such as MD5 allow for authentication of data obtained from insecure mirrors. The MD5 hash must come from a secure source (an HTTPS page) of an organization you trust. While security flaws in the MD5 algorithm have been uncovered, MD5 hashes are generally sufficient for casual use. Please refer to the secure UbuntuHashes page for the official list of Ubuntu MD5 hashes.
 
In terms of security, cryptographic hashes such as MD5 allow for authentication of data obtained from insecure mirrors. The MD5 hash must come from a secure source (an HTTPS page) of an organization you trust. While security flaws in the MD5 algorithm have been uncovered, MD5 hashes are generally sufficient for casual use. Please refer to the secure UbuntuHashes page for the official list of Ubuntu MD5 hashes.
 
 
[[Anchor(linux)]]
 
[[Anchor(linux)]]
 
== MD5SUM on Linux ==
 
== MD5SUM on Linux ==
 
Most Linux distributions come with the <code><nowiki>md5sum</nowiki></code> utility so installation is usually unnecessary. We are going to use the Ubuntu 6.10 Desktop install CD for the following example:
 
Most Linux distributions come with the <code><nowiki>md5sum</nowiki></code> utility so installation is usually unnecessary. We are going to use the Ubuntu 6.10 Desktop install CD for the following example:
 
 
First go to the correct directory to check a downloaded ''iso'' file:
 
First go to the correct directory to check a downloaded ''iso'' file:
 
<pre><nowiki>
 
<pre><nowiki>
第22行: 第16行:
 
<pre><nowiki>
 
<pre><nowiki>
 
b950a4d7cf3151e5f213843e2ad77fe3 ubuntu-6.10-desktop-i386.iso</nowiki></pre>
 
b950a4d7cf3151e5f213843e2ad77fe3 ubuntu-6.10-desktop-i386.iso</nowiki></pre>
 
 
Compare the hash (the alphanumeric string on left) that your machine calculated with the corresponding hash on the UbuntuHashes page. When both hashes match exactly then the downloaded file is almost certainly intact. If the hashes do not match, then there was a problem with either the download or a problem with the server. You should download the file again from either the same mirror, or from a different mirror if you suspect a server error. If you continuously receive an erroneous file from a server, please be kind and notify the webmaster of that mirror so they can investigate the issue.
 
Compare the hash (the alphanumeric string on left) that your machine calculated with the corresponding hash on the UbuntuHashes page. When both hashes match exactly then the downloaded file is almost certainly intact. If the hashes do not match, then there was a problem with either the download or a problem with the server. You should download the file again from either the same mirror, or from a different mirror if you suspect a server error. If you continuously receive an erroneous file from a server, please be kind and notify the webmaster of that mirror so they can investigate the issue.
 
 
== MD5SUM on Mac OS X ==
 
== MD5SUM on Mac OS X ==
 
Follow the instructions for [[linux MD5SUM on Linux]], except use the command "md5" instead of "md5sum".
 
Follow the instructions for [[linux MD5SUM on Linux]], except use the command "md5" instead of "md5sum".
 
 
== digest(1) on Solaris ==
 
== digest(1) on Solaris ==
 
Use the Solaris digest(1) command, specifying the md5 algorithm with the -a flag. For instance:
 
Use the Solaris digest(1) command, specifying the md5 algorithm with the -a flag. For instance:
第33行: 第24行:
 
$ digest -a md5 ubuntu-6.10-server-sparc.iso
 
$ digest -a md5 ubuntu-6.10-server-sparc.iso
 
4971edddbfc667e0effbc0f6b4f7e7e0</nowiki></pre>
 
4971edddbfc667e0effbc0f6b4f7e7e0</nowiki></pre>
 
 
== MD5SUM on Windows ==
 
== MD5SUM on Windows ==
 
Windows does not come with '''''md5sum'''''. You must download one from another location, preferably one that you trust. There are command line utilities (<code><nowiki>md5sum.exe</nowiki></code>) that work similarly to the Unix utility; one public domain version with source is available from [http://www.fourmilab.ch/md5/ Fourmilab], but the version available from [http://cygwin.com/ Cygwin] is probably easier to install and update, and Cygwin is also recommended and trusted as the source for many more Unixy utilities. Once installed, Cygwin's '''''md5sum''''' behaves exactly as described in '''''MD5SUM on Linux''''' above.
 
Windows does not come with '''''md5sum'''''. You must download one from another location, preferably one that you trust. There are command line utilities (<code><nowiki>md5sum.exe</nowiki></code>) that work similarly to the Unix utility; one public domain version with source is available from [http://www.fourmilab.ch/md5/ Fourmilab], but the version available from [http://cygwin.com/ Cygwin] is probably easier to install and update, and Cygwin is also recommended and trusted as the source for many more Unixy utilities. Once installed, Cygwin's '''''md5sum''''' behaves exactly as described in '''''MD5SUM on Linux''''' above.
 
 
There are also graphical tools such as the one used in the walk-through provided below.
 
There are also graphical tools such as the one used in the walk-through provided below.
 
+
# Download and install [http://www.nullriver.com/index/products/winmd5sum winMD5Sum], a free and open source hash verification program.
* Download and install [http://www.nullriver.com/index/products/winmd5sum winMD5Sum], a free and open source hash verification program.
+
# Right-click the ISO file.
* Right-click the ISO file.
+
# Click Send To, then `winMD5Sum`.
* Click Send To, then `winMD5Sum`.
+
# Wait for `winMD5Sum` to load and finish the checksum (this may take a significant amount of time depending on your computer's performance).
* Wait for `winMD5Sum` to load and finish the checksum (this may take a significant amount of time depending on your computer's performance).
+
# Copy the corresponding hash from UbuntuHashes into the bottom text box.
* Copy the corresponding hash from UbuntuHashes into the bottom text box.
+
# Click "Compare"
* Click "Compare"
+
 
https://help.ubuntu.com/community/HowToMD5SUM?action=AttachFile&do=get&target=winMD5Sum.png
 
https://help.ubuntu.com/community/HowToMD5SUM?action=AttachFile&do=get&target=winMD5Sum.png
* A message box will say "MD5 Check Sums are the same" if the hashes are equal.
+
# A message box will say "MD5 Check Sums are the same" if the hashes are equal.
 
+
 
== MD5SUM on CD ==
 
== MD5SUM on CD ==
 
To see if your Ubuntu CD was corrupted when burned to the disk, see the [[UbuntuHelp:CDIntegrityCheck]] page, or follow the instructions below.
 
To see if your Ubuntu CD was corrupted when burned to the disk, see the [[UbuntuHelp:CDIntegrityCheck]] page, or follow the instructions below.
 
 
First mount the CD, if not already mounted:
 
First mount the CD, if not already mounted:
 
<pre><nowiki>
 
<pre><nowiki>
 
sudo mount /dev/hda /cdrom</nowiki></pre>
 
sudo mount /dev/hda /cdrom</nowiki></pre>
 
 
Then use the supplied md5sum file on the CD:
 
Then use the supplied md5sum file on the CD:
 
<pre><nowiki>
 
<pre><nowiki>
 
cd /cdrom
 
cd /cdrom
 
md5sum -c md5sum.txt | grep -v 'OK$'</nowiki></pre>
 
md5sum -c md5sum.txt | grep -v 'OK$'</nowiki></pre>
 
 
If the command outputs any errors, you'll know that either the burn was bad or the .iso is corrupt. Please note that this method does not verify authenticity unless the hash of the iso file is compared to the hash at the secure UbuntuHashes page.
 
If the command outputs any errors, you'll know that either the burn was bad or the .iso is corrupt. Please note that this method does not verify authenticity unless the hash of the iso file is compared to the hash at the secure UbuntuHashes page.
 
 
== External Links ==
 
== External Links ==
 
* [http://en.wikipedia.org/wiki/Cryptographic_hash_function Wikipedia's Cryptographic Hash Entry]
 
* [http://en.wikipedia.org/wiki/Cryptographic_hash_function Wikipedia's Cryptographic Hash Entry]
 
 
----
 
----
 
Outstanding Issues
 
Outstanding Issues
 
* Something with respect to the MD5SUMS.gpg file should be added or linked to herein.
 
* Something with respect to the MD5SUMS.gpg file should be added or linked to herein.
 
 
----
 
----
 
[[category:CategoryDocumentation]]
 
[[category:CategoryDocumentation]]
  
 
[[category:UbuntuHelp]]
 
[[category:UbuntuHelp]]

2007年11月30日 (五) 17:43的版本

The program md5sum is designed to verify data integrity using the MD5 (Message-Digest algorithm 5) 128-bit cryptographic hash. MD5 hashes used properly can confirm both file integrity and authenticity. In terms of integrity, an MD5 hash comparison detects changes in files that would cause errors. The possibility of changes (errors) is proportional to the size of the file; the possibility of errors increase as the file becomes larger. It is a very good idea to run an MD5 hash comparison check when you have a file like an operating system install CD that has to be 100% correct. In terms of security, cryptographic hashes such as MD5 allow for authentication of data obtained from insecure mirrors. The MD5 hash must come from a secure source (an HTTPS page) of an organization you trust. While security flaws in the MD5 algorithm have been uncovered, MD5 hashes are generally sufficient for casual use. Please refer to the secure UbuntuHashes page for the official list of Ubuntu MD5 hashes. Anchor(linux)

MD5SUM on Linux

Most Linux distributions come with the md5sum utility so installation is usually unnecessary. We are going to use the Ubuntu 6.10 Desktop install CD for the following example: First go to the correct directory to check a downloaded iso file:

cd download_directory

Then run the following command from within the download directory.

md5sum ubuntu-6.10-desktop-i386.iso

The md5sum should print out a single line after calculating the hash:

b950a4d7cf3151e5f213843e2ad77fe3 ubuntu-6.10-desktop-i386.iso

Compare the hash (the alphanumeric string on left) that your machine calculated with the corresponding hash on the UbuntuHashes page. When both hashes match exactly then the downloaded file is almost certainly intact. If the hashes do not match, then there was a problem with either the download or a problem with the server. You should download the file again from either the same mirror, or from a different mirror if you suspect a server error. If you continuously receive an erroneous file from a server, please be kind and notify the webmaster of that mirror so they can investigate the issue.

MD5SUM on Mac OS X

Follow the instructions for linux MD5SUM on Linux, except use the command "md5" instead of "md5sum".

digest(1) on Solaris

Use the Solaris digest(1) command, specifying the md5 algorithm with the -a flag. For instance:

$ digest -a md5 ubuntu-6.10-server-sparc.iso
4971edddbfc667e0effbc0f6b4f7e7e0

MD5SUM on Windows

Windows does not come with md5sum. You must download one from another location, preferably one that you trust. There are command line utilities (md5sum.exe) that work similarly to the Unix utility; one public domain version with source is available from Fourmilab, but the version available from Cygwin is probably easier to install and update, and Cygwin is also recommended and trusted as the source for many more Unixy utilities. Once installed, Cygwin's md5sum behaves exactly as described in MD5SUM on Linux above. There are also graphical tools such as the one used in the walk-through provided below.

  1. Download and install winMD5Sum, a free and open source hash verification program.
  2. Right-click the ISO file.
  3. Click Send To, then `winMD5Sum`.
  4. Wait for `winMD5Sum` to load and finish the checksum (this may take a significant amount of time depending on your computer's performance).
  5. Copy the corresponding hash from UbuntuHashes into the bottom text box.
  6. Click "Compare"

HowToMD5SUM?action=AttachFile&do=get&target=winMD5Sum.png

  1. A message box will say "MD5 Check Sums are the same" if the hashes are equal.

MD5SUM on CD

To see if your Ubuntu CD was corrupted when burned to the disk, see the UbuntuHelp:CDIntegrityCheck page, or follow the instructions below. First mount the CD, if not already mounted:

sudo mount /dev/hda /cdrom

Then use the supplied md5sum file on the CD:

cd /cdrom
md5sum -c md5sum.txt | grep -v 'OK$'

If the command outputs any errors, you'll know that either the burn was bad or the .iso is corrupt. Please note that this method does not verify authenticity unless the hash of the iso file is compared to the hash at the secure UbuntuHashes page.

External Links


Outstanding Issues

  • Something with respect to the MD5SUMS.gpg file should be added or linked to herein.