Home → Feedback →

SHA sum of download is incorrect

• Edit

Ole Hertzum

19 Feb, 2017 04:22 PM

SHA256: f74fd4788cfa0820933499768fa7dfe1c0b295bbae9f43812dc3590923975de4 does not match shasum-a 256 output.

I used shasum -a 256 filename.dmg

Has the file been tampered?

I used both shasum and openssl, and both gave this result:
8dbc5821876ca5c470d0127087f782ba02a842c52e6e19336cd935db7c5859ab

Expected
I expected shamus to be:
f74fd4788cfa0820933499768fa7dfe1c0b295bbae9f43812dc3590923975de4

macOS           10.12.3     16D32
GPG Suite       2016.10     21  
GPGMail -
GPG Keychain    1.3.2       1245
GPGServices     1.11        916 
MacGPG2         2.0.30      884 
GPGPreferences  2.0.1       902 
Libmacgpg       0.7         775 
pinentry        0.9.7       4

1. Support Staff 1 Posted by Steve on 19 Feb, 2017 04:35 PM

   

   Hey Ole,

   welcome to the GPGTools support platform. Sorry you are having problems using GPG Suite.

   So you are following the steps from:
   https://gpgtools.tenderapp.com/kb/how-to/how-to-verify-the-download...

   I just reproduce the steps and get the correct value:

   shasum -a 256 /Users/username/Downloads/GPG_Suite-2017.1b2.dmg f74fd4788cfa0820933499768fa7dfe1c0b295bbae9f43812dc3590923975de4 /Users/username/Downloads/GPG_Suite-2017.1b2.dmg

   Could you please re-download and check a second time which value you get as a result?

   Best,
   steve

   • Edit

2. 2 Posted by Ole Hertzum on 19 Feb, 2017 05:28 PM

   

   Hi Steve

   I did make a second download with the same result.

   It was just for your information, to be sure the file was not compromized.

   Den 19. februar 2017 kl. 17.35.39, Steve ([email blocked](mailto:[email blocked])) skrev:

   • Edit

3. 3 Posted by Ole Hertzum on 19 Feb, 2017 05:37 PM

   

   Hi again Steve

   Third time is the lucky one… I don’t know what I did wrong, but the checksum is OK now.

   ---------------------------------
   Vh Ole Hertzum

   -----BEGIN PGP PUBLIC KEY BLOCK-----

   mQINBFingkkBEADOwqTea8CqY4rJM2np0P0cM3IvX5ZroMsdSEy3r2XwVAt+D9Ax
   WsSCdfqDIYnUNsvgP1EazBAF0frsSpgsx2oqtcm/VdlBrcEQhxge+uC/9ck21Nww
   IVc2bal/QunkE5midoqjwDd9VCLvmXOMjGvTnVmLhLJNMOTc1N/+PV0G3xblWyxs
   WvgcvZpPwg3jSjIP+wDKheUjUYMRh+qEpIoxUBfT9pYSvjaNrw2riW1A5GqY2koe
   aSh3LxpoEnl3Cm5/d3IR00ZuJCG0TstdqrPQhjBha4OtCMwJZUJNW4sh7/lXEvDB
   CXWSjtdhNsnpghMNkLpf0/H9rcr1efYXGcMmgKgnmr4GJ4Jo9zjDJHZK5JQ+Rf3y
   I4RD8adexP+bq0VZKJY2UFEJypVLpQ23VpmWqx8gUKa2UNC0dd4dW51z1TBuThsJ
   IE04JZ5YC3PXf11W9Dh47VfWStum8zrGdGuXcwqkwO1RTq5SJnaBuSxh28P4X0Hx
   mgvojjvK2EiB7ao/Gl/OWd0NjzVK/anwz1WB5z59zgfEzQa1sS3BT1JBzcFWiAHW
   Yvab6SD3clnZ0B129BtSHtEpqGSZNNdRbyF69ex31c6eOLb+Uq2fe0XDCyVJqmZ1
   sLJpk+p3s0S+Z8CMP6sfy/lg5hHo4xa5dOKN4qLVy6SfLPnDS7UHBmRk+wARAQAB
   tBxPbGUgSGVydHp1bSA8b2xlQGhlcnR6dW0uZGs+iQI9BBMBCgAnAhsDBQsJCAcD
   BRUKCQgLBRYCAwEAAh4BAheABQJYp4WBBQkaFC84AAoJEGau1gErorBvxBMP/04q
   fJiErtysj/xjbJp1KY53FEGMfNH2we+C68ZU9wKDPfZXgJI6WpK+Vsuwtd9+6yER
   MV+WOczWkEdv6Lbfysn/qOW7QePbXcz3hJHEXAojonYzw9op0tB8GGoqEJOvW3TZ
   0S2Ll0xHolZ7W03/NeeM19InhuSKoY0gW3NxZ7DlYhPv2rACID4pTsARY6eSGdAm
   1gu7E0tM6qlHZAOuBqjActomBYRyb3uxVwhgAeDSWC1lH7DUhhg/rdP+OwYSFeaY
   IFFGI9BIpIYrCxTcsT+ahXWYf1PVSJIs+UMgSQg+zkoBSKTfW+lJHszhskCL5P2q
   cxvPRxLap4uU4Ktg5YNYYCK4+YJh4j9a4D+z1K1/sAvXuYGXU2He8bWMuQ77WWI3
   77DAY3MjjFOYE7cSdkRbtIhWUpUToWJ91MQ5svuYlG5sAoCdHsnxiUAJCg9JRGZm
   P6jc3bqlTo6Fu5qnDKfkanp6PNkwQp0tZfvSJkR/n+mGqjHw4H0Fe2jyBq59mdIF
   7ZrQclIra+AkZcX83Bb61kpa5hbgP2qlJ0BInNnCvK8QCNBcTdQ7kD0RwYqQK/Qi
   KF06udJ+wk0hBaJkEf/mdLeF5dGyAqhe62G09RsbXRWxcLu+BqYKvXRMp5bYu9Cy
   9/S8Id7c1gwqrVbRWqBJF0Txm4+8MS3M2kqt9P7QuQINBFingkkBEADj89Ej8Csh
   gXcmO9utIBkzcWiUqNuF1ETUPRzRqkcmQ3x1VEC8p6I09xxiIOtLyC9pXyruHFsx
   TfnHp8xyP7Et0qtP2DM7wfjJ/J8yndPq50uYHD3B8oUHw3Z7OFkHu13e7FuXfhwY
   ioyOpflpe9yvn7QVG8YJI9wBTLI3q/rfjlM1uKQwwNCmdW6cSUOURQslUtFdh1ps
   tgUL454Oykdf1w4HIVsva6Lacr+SkBgaDu3QobhrDo0VjzKinn6Dxo8Q13Oei88h
   RFBbvATLFZtPX9O7DASQpHp2KU3BppZIb/LBDxIv4k2yVbLsYqbpDQCIzUpdOgfr
   hm5BQrkBh80Gh4KvMH0bUi4J7Z1y/yeDTON82wne9h/7mrzQ3T7tn1048MibYMX9
   iCJVyu1NQ2ojKHLfuAiaWkhZ+R2M8b7iHE5N3/HEt2hKl4lf/q8h9UiEgguQ81CW
   9AobTF+A8JUVlWWWDksX524l/VbZ5qRwtc+st9GOOtM2wvC3mHCfdJoPQPcEdPHW
   uk0FsH03YxE1vRWEURfTRKAk21bxgYg500taHn4ilD5/6YgVqC2rIoEj3Eo7pTik
   whh4IExThn5omX+03urs9GchLTSVPr0hZmfE2qQViQ9psAij3HQ6RfY2z9mG+1QV
   DCmDK+M7qkyHaizSTWAoR0c8o/mlrVeXNwARAQABiQIlBBgBCgAPBQJYp4JJAhsM
   BQkYkJMAAAoJEGau1gErorBvWuYP+gPSDO4GWs0I6ovqggild70vXEGYiO2SStdX
   JqScnGebyV7zyRfX4NoLKpo960rhlCYyE27gUe/o5eH5LHgEtgaJ/Hle3Ml3EMIP
   fScMp8L4xMdcUgddNEvCOevMCfrBJuBoIfVIleqEfVw/ECXj9NV+YSEuax0uiBVo
   pM8vlcWy9auprnZt+1s6YFh11ERB6y6A2n1TY7OQ8Qsd3eD2wi69cq8ke9fdhgXl
   VxhKaqzuNZ0vucdWz1HBldfTVRqmgUar9c248TYct9QoH/cUj7MZWrMVtlvi9ls+
   rtVsoqpcz1HrNJQWQiqCD0USnYQhjamsn30oP9663XW1jU+sKHCi1yDI5pgCiuBH
   bBft9VJXbnqTPXvuHaSZLDp3C1qIP2fU16XVu79zeVWgZm9B7L9KPEw32eoN/TdR
   6TCvnVoxgSdwOmKQBoHgvc7vxqdvKp5pXn61/BuzSJZPWGQ9S0/tzsPYnAPq9PwG
   VS6IIiclzK4/xNs7IJEtGDurzqqdOcOGrDsY3MXfwkLlPrD2lAVVeZbRNUe1H57n
   FbbTtZmIra6XFqde1BJPDXL5WVqmlHU1w6VdrsBpAh758jDiWI0OxiVoiHPTmWOU
   v0GNI2TkHU/jz8Cptwjesxe2uUY4UEEwqljPTPsqGlyvtwTAAomcq9e1Ni4dIt/g
   JqjR+RnW
   =lG+P
   -----END PGP PUBLIC KEY BLOCK-----

   Den 19. februar 2017 kl. 18.28.19, Ole Hertzum ([email blocked]) skrev:

   Hi Steve

   I did make a second download with the same result.

   It was just for your information, to be sure the file was not compromized.

   Den 19. februar 2017 kl. 17.35.39, Steve ([email blocked]) skrev:

   • signature.asc 837 Bytes
   • Edit

4. Support Staff 4 Posted by Steve on 19 Feb, 2017 06:02 PM

   

   Perfect. Glad, this is solved for you. I'm closing this discussion. Should you need further assistance or have questions you can re-open this discussion here or open a new one any time.

   Best, steve

   • Edit

5. Steve closed this discussion on 19 Feb, 2017 06:02 PM.