Arch Linux

fabsidereal

Member

Registered: 2021-08-21

Posts: 2

Is MD5 checksum still reasonable?

In the Download page, MD5 still keeps on showing up and some people have already turned their backs on SHA1 even. So my question is, are there plans on removing it or both of them and adding SHA256 or something else since even that one isn't ideal at this point?

Last edited by fabsidereal (2021-08-21 07:59:07)

WorMzy

Forum Moderator

From: Scotland

Registered: 2010-06-16

Posts: 11,845

Website

Re: Is MD5 checksum still reasonable?

The *sums are only useful to determine whether the download was successful -- the likelihood of getting a corrupted download which still passes BOTH md5sum and sha1sum checks is highly unlikely.

Use the pgp signature if you want to verify authenticity.

---

Sakura:-
Mobo: MSI MAG X570S TORPEDO MAX // Processor: AMD Ryzen 9 5950X @4.9GHz // GFX: AMD Radeon RX 5700 XT // RAM: 32GB (4x 8GB) Corsair DDR4 (@ 3000MHz) // Storage: 1x 3TB HDD, 6x 1TB SSD, 2x 120GB SSD, 1x 275GB M2 SSD

Making lemonade from lemons since 2015.