• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

Still using MD5 for download hash?!

Nighty

New Member
Joined
Jun 28, 2022
Messages
3 (0.03/day)
I was having trouble matching a hash displayed in the downloads section with the file I had downloaded, when I noticed it was MD5.
As per the powershell help:
For security reasons, MD5 and SHA1, which are no longer considered secure, should only be used for simple change
validation, and should not be used to generate hash values for files that require protection from attack or tampering.
 

W1zzard

Administrator
Staff member
Joined
May 14, 2004
Messages
24,545 (3.65/day)
Processor Core i7-8700K
Memory 32 GB
Video Card(s) RTX 3080
Display(s) 30" 2560x1600 + 19" 1280x1024
Software Windows 10 64-bit
MD5 should be sufficient

I just don't have the space to put longer hashes. Any ideas?
 

Nighty

New Member
Joined
Jun 28, 2022
Messages
3 (0.03/day)
I just don't have the space to put longer hashes. Any ideas?

Hmm maybe show the first half(ish) with a drop-down "v" that expands to the full thing like "System Specs" does?

1656397258493.png



Or maybe a a longer hash split over two lines?

1DC8034425B375814AAC50A50E6C2215
B74DE0682F0B63A6E3E21C52D776CE90

(SHA256)


Or a really small font? :)
 
Joined
Apr 24, 2020
Messages
1,781 (1.99/day)
MD5 should be sufficient

I just don't have the space to put longer hashes. Any ideas?
From a cryptography perspective, showing off the first 16 bytes of SHA512 would be more secure than MD5.

Maybe you can show off the first 16 Bytes, with an ellipsis + tooltip for the rest of the hash if anyone hovers over it. No one is eyeballing all 128 characters of SHA512 anyway, the first 16 bytes / 32 characters will be sufficient.
 

W1zzard

Administrator
Staff member
Joined
May 14, 2004
Messages
24,545 (3.65/day)
Processor Core i7-8700K
Memory 32 GB
Video Card(s) RTX 3080
Display(s) 30" 2560x1600 + 19" 1280x1024
Software Windows 10 64-bit
That's what your "truncated with ellipsis" achieves. Not sure about showing the full hash in the tooltip or just make the truncated a link that says "click to show full hash", so you can mark and copy (not everybody knows to compare only the first characters)

Edit: I made some changes, thoughts?
 
Last edited:
Top