security - [algorithm/md5]: what is the detailed verification process in file sharing? -
I have read the wiki page of "cryptographic hash function" today. And I came to know that, MD5 has been implemented in the file verification.
There is something that I can not understand, here it is.
Suppose I want to download a file from a website (.exe, .iso, whatever) 1. Does the server first transfer the MD5 code of the file? If so, how do I store the MD5 code? Store the code in a file?
2. How do I start the validation process when it is downloaded? Do I automatically verify the verification or Downloader (this will be the Chrome Explorer download tool) Automatically Verify?
3. If I am downloading the file downloaded through some hackers on the internet, then the hacker will know what the file is? And how to prevent interception?
Thank you. The purpose of the MD5 published on the download websites for the previous answers is to crackers (human-in-the- Middle Assault) has nothing to do with. This is to ensure that you have downloaded it correctly if some bits have become corrupted for some reasons, the software can not run, security is more complex than a small hash, but fortunately your browser Know how to deal with this: Whenever you join TLS (SSL, HTTP), it will establish a secure connection. Just how much data is sent, even if it can not see what the data is, an attacker could guess what file you are downloading.
- The MD5 probe is completely manual. You download it or copy and paste it yourself.
- Each operating system should come with an MD5 program; Maybe Windows is not the only one who does not do the one for Google if you have the unfortunate need.
- With MD5 alone, he can definitely see the file. The only way to stop interceptions is to use encryption, which most sites use https URLs.
Edit: What is MD5? This is the value of small calculations made with all the parts of the file. You send the file, and count yourself using the MD5 program, and check that you will get the same value when listed on the website. Calculations are clever, and if one or more bits of the file get corrupted, the calculated MD5 value will change, so you know that the download is not working and you need to download it again.
Comments
Post a Comment