Checking isos with sha - small wrinkle

[Scott Robbins]

On Thu, Jun 04, 2009 at 11:59:39AM -0400, Todd Zullinger wrote:
> Scott Robbins wrote:
> > If you look at the checksum textfile, it now says Hash:SHA256 (For
> > awhile it mentioned SHA1 or something, referring to the GPG sigs.)
> 
> That Hash line is only for the gpg signature and not the checksum data
> that is being signed in the CHECKSUM file.  It would be bad for people
> to conflate the two. :)


Yes, as I said, it referred to the GPG.   :) 
However, it was confusing people, judging from a few questions on the
forums. 
 

Unless one regularly works with check sums, if you see a 40 something
digit number, you're not going to realize it should be a 60 digit one so
it's easy to make the error.  If you work with them a lot, of course,
your eye will note that it seems shorter than usual. 


At any rate, it's pretty clear now.  

-- 
Scott Robbins
PGP keyID EB3467D6
( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 )
gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

Forrest: This is the burden we bear, brother. We have a gig that 
would inevitably cause any girl living to think we are cool upon 
cool. Yet, we must Clark Kent our way through the dating scene, 
never to use our unfair advantage. Thank God we're pretty.