Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SHA512 --> SHA256 #101

Open
keith-gardner opened this issue Jan 4, 2024 · 1 comment
Open

SHA512 --> SHA256 #101

keith-gardner opened this issue Jan 4, 2024 · 1 comment

Comments

@keith-gardner
Copy link

Description

For 1.2.9

$ shasum -a 256 BlockstreamGreen_MacOS_x86_64.zip
1b8589bc997016087ba27ef28f2026626834c91af525ca88bd3841bafcbe4c06 BlockstreamGreen_MacOS_x86_64.zip

Matches SHA256SUMS.asc

$ shasum -a 512 BlockstreamGreen_MacOS_x86_64.zip
4b211ed4a65b9eb276391ed464f83b07041bae1ce94b9bb5dc534ed824541ce89ae57c745f2b386f3520eda1341a7d6cb427c256604ca14a08c24660f1c34831 BlockstreamGreen_MacOS_x86_64.zip

Does not match

Version

1.2.9

Steps to reproduce

Just run shasum -a 512 vs 256.

What do change?

The SHA256SUMS.asc should say SHA256, not SHA512.
@atcz
Copy link

atcz commented Nov 28, 2024

The SHA512 refers to the PGP signed message, not the contents of the message. You should be verifying the PGP message, and using the verified output to compare the SHA256. The verified output only contains the 4 lines with the hashes and filenames.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@keith-gardner @atcz