Are there wrong SHA256 numbers on your download page???

Uwe Mueller uwe-mueller.privat at arcor.de
Sat Jun 13 19:05:39 CEST 2009


Hello,
I have just downloaded the file gmp-4.3.1.tar.bz2 and calculated
the SHA1 and SHA256 sums in order to check the integrity of the
file. While the SHA1 sum coincides with the one mentioned on your
download page, the SHA256 is different. Then, for checking,
I downloaded also gmp-4.3.1.tar.gz with the same result.
Next, I checked using the other server: the files are identical on both 
servers.

The sums I found on http://gmplib.org/ are
SHA1 gmp-4.3.1.tar.bz2 acbd1edc61230b1457e9742136994110e4f381b2
SHA1 gmp-4.3.1.tar.gz 0792e63f3aa6eed0cd6eaa20043172b5c7e4d8fe
SHA256 gmp-4.3.1.tar.bz2 
e18ec84c97938564d22fe46c8d6ef737cc5be508a30018a7fdde633f90bb20f0
SHA256 gmp-4.3.1.tar.gz 
56675ec6721956588aed848e6ba5c22d1345e3ac03376ca6f4fbe7322592a49c

My sums are
SHA1 gmp-4.3.1.tar.bz2 acbd1edc61230b1457e9742136994110e4f381b2
SHA1 gmp-4.3.1.tar.gz 0792e63f3aa6eed0cd6eaa20043172b5c7e4d8fe
SHA256 gmp-4.3.1.tar.bz2 
aa0295472854f2f9691db7c6892921452521b4d5def15223136f4733309db7c8
SHA256 gmp-4.3.1.tar.gz 
7ffa2ee7c85f998844c107db2ecce55ab4b7398f49a2fc0d7308e3e6c74fd1e6

For calculating the SHA256 sums I used both "openssl dgst -sha256" and 
"sha256sum" with the
same results on two different computers.

Therefore my assumption is now, that the SHA256 sums you list on on 
http://gmplib.org/ might be incorrect.

Can you please check your SHA256 sums and inform me about the results?

Thanks and best regards
Uwe Müller






More information about the gmp-bugs mailing list