请输入您要查询的百科知识:

 

词条 Sha1sum
释义

  1. Examples

     Hash file trees 

  2. See also

  3. References

  4. External links

{{lowercase|sha1sum}}

{{mono|sha1sum}} is a computer program that calculates and verifies SHA-1 hashes. It is commonly used to verify the integrity of files. It (or a variant) is installed by default in most Unix-like operating systems.{{Citation needed|reason=A quick survey shows that only Linux variants seem to ship this program by default.|date=February 2017}} Variants include {{mono|shasum}} (which permits SHA-1 through SHA-512 hash functions to be selected manually), {{mono|sha224sum}}, {{mono|sha256sum}}, {{mono|sha384sum}} and {{mono|sha512sum}}, which use a specific SHA-2 hash function, and {{mono|sha3sum}} (which permits SHA-3 through SHA3-512, SHAKE, RawSHAKE and Keccak functions to be selected manually). Versions for Microsoft Windows also exist, and the ActivePerl distribution includes a perl implementation of shasum. On FreeBSD and OpenBSD the utilities are called md5, sha1, sha256, sha512. These versions offer slightly different options and features. Additionally, FreeBSD offers the "SKEIN" family of message digests.

The SHA-1 variants are proven vulnerable to collision attacks, and users should use for example a SHA-2 variant such as sha256sum instead to prevent tampering by an adversary.[1][2]

It is included in GNU Core Utilities,[3] Busybox[4] and Toybox.[5]

Examples

To create a file with an sha1 hash in it, if one is not provided:

$ sha1sum filename [filename2] ... > SHA1SUM

If distributing one file, ".sha1" may be appended to the filename e.g.:

$ sha1sum my-zip.tar.gz > my-zip.tar.gz.sha1

The output contains one line per file of the form "{hash} SPACE ASTERISK [{directory} SLASH] {filename}". For example:

$ sha1sum -b my-zip.tar.gz

d5db29cd03a2ed055086cef9c31c252b4587d6d0 *my-zip.tar.gz

$ sha1sum -b subdir/filename2

55086cef9c87d6d031cd5db29cd03a2ed0252b45 *subdir/filename2

To verify the file was downloaded correctly:

$ sha1sum -c SHA1SUM

filename: OK

filename2: OK

$ sha1sum -c my-zip.tar.gz.sha1

my-zip.tar.gz: OK

Hash file trees

sha1sum can only create checksums of one or multiple files inside a directory, but not of a directory tree, i.e. of subdirectories, sub-subdirectories, etc. and the files they contain. This is possible by using sha1sum in combination with the commands find and xargs (and optionally with sort so that the files are sorted in the checksum file). sha1deep can create checksums of a directory tree.

You can also use sha1sum with exec:

$ find s_* -type f -exec sha1sum {} \\;

65c23f142ff6bcfdddeccebc0e5e63c41c9c1721 s_1/file_s11

d3d59905cf5fc930cd4bf5b709d5ffdbaa9443b2 s_2/file_s21

5590e00ea904568199b86aee4b770fb1b5645ab8 s_a/file_02

51e612c2f909769a5b652417084e94a3a9d6c658 s_a/file_01

See also

  • cksum
  • md5sum
  • md5deep
  • Comparison of file verification software
  • GNU Core Utilities

References

1. ^{{cite web|url=https://www.schneier.com/blog/archives/2005/02/cryptanalysis_o.html|title=Cryptanalysis of SHA-1|author=Bruce Schneier|publisher=Schneier on Security}}
2. ^https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html
3. ^https://www.gnu.org/software/coreutils/manual/html_node/sha1sum-invocation.html
4. ^https://github.com/mirror/busybox/blob/a6f8651/testsuite/sha1sum.tests
5. ^https://github.com/landley/toybox/blob/409a8e093a4ea8e0892ab302b4fd433d08f435eb/toys/lsb/md5sum.c#L17

External links

  • {{man|1|sha1sum|die.net}}
  • Apple Knowledge Base Article "Mac OS X: How to Verify a SHA-1 Digest"
  • sha1sum for Windows announcement
  • [https://www.freebsd.org/cgi/man.cgi?query=md5 FreeBSD Manual Pages md5]
  • [https://man.openbsd.org/md5 OpenBSD General Commands Manual md5]
{{security-software-stub}}

2 : Cryptographic software|Unix security-related software

随便看

 

开放百科全书收录14589846条英语、德语、日语等多语种百科知识,基本涵盖了大多数领域的百科知识,是一部内容自由、开放的电子版国际百科全书。

 

Copyright © 2023 OENC.NET All Rights Reserved
京ICP备2021023879号 更新时间:2024/11/11 20:52:30