Re: sha2 utilities: Print or check SHA-2 digests
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 rmyster wrote: > Yes, suse 10.1 with coreutils-5.93-20. In the info manual, sha2 is > mentioned under section 6.6 (sha2 utilities) and all it says is "The > usage and options of these commands are precisely the same as for > `md5sum'." > > While this isn't a linux mailing list, md5sum is part of gnupg. No, it's not. md5sum is part of the coreutils package. You're using suse, which is an rpm based distro, so if I may extend the slightly off-topic posts a little, here's a handy way for you to find out what package a file belongs to: $ rpm -qf /usr/bin/md5sum On my FC5 system this returns coreutils-5.93-7.2. > The closest other choice was the coreutils bug lists and this didn't > seem like a bug related question. How not? If the docs state an application is available and it's not it's a bug - either in the docs or in the packaging. In any case, I took a blind leap of faith and searched for the string sha2 on the coreutils mailing list and the very first item returned[1] was titled: Re: Not finding sha256sum It's a documentation bug in coreutils. Total time spent, 30 secs. :) [1] http://lists.gnu.org/archive/html/bug-coreutils/2005-12/msg00170.html - -- ToddOpenPGP -> KeyID: 0xD654075A | URL: www.pobox.com/~tmz/pgp == A diplomat is a person who can tell you to go to Hell in such a way that you actually look forward to the trip. -- Anonymous -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.3 (GNU/Linux) Comment: When crypto is outlawed bayl bhgynjf jvyy unir cevinpl. iG0EARECAC0FAkSK+zkmGGh0dHA6Ly93d3cucG9ib3guY29tL350bXovcGdwL3Rt ei5hc2MACgkQuv+09NZUB1pfBwCfQpESyyiX4VaoB3PxkUfu6tmgzHYAoMtHAQz9 86lV+58Vw46GWqxG5S0s =BkqK -END PGP SIGNATURE- ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: sha2 utilities: Print or check SHA-2 digests
> > > Still, does anyone know what the coreutils docs are referring to when it > > implies that sha512 hashes can be obtained with a command called > > "sha512sum" in the same manner of usage as md5sum and sha1sum? > > (i.e "sha512sum file") > Maybe you could try to tell us what version of coreutils do you have > installed and what OS are you using, we don't have a magic ball to ask. > Two of your headers: > > X-Mailer: Evolution 2.6.0 > > Message-Id: <[EMAIL PROTECTED]> > so I suppose you are using SuSE Linux, version 10.1 includes Evolution > 2.6.0. Incidentally I am using the same version of this nice > distribution, I have coreutils-5.93 here and there is no trace of sha2 > support in documentation. > > However you should have noticed that this is not a linux mailing list. > - -- Yes, suse 10.1 with coreutils-5.93-20. In the info manual, sha2 is mentioned under section 6.6 (sha2 utilities) and all it says is "The usage and options of these commands are precisely the same as for `md5sum'." While this isn't a linux mailing list, md5sum is part of gnupg. The closest other choice was the coreutils bug lists and this didn't seem like a bug related question. I'll take your hint and drop the topic. ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: sha2 utilities: Print or check SHA-2 digests
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 On 06/10/2006 03:03 PM, rmyster wrote: > Yes, and supposedly it's causing problems for support departments. On > the other hand, if you're looking for the command to calculate sha256 > and sha512 hashes, what are the odds you will be targeting words like > "ALGO"? "HASH" maybe, but "algo"? I'd be curious as to how many users > even know that gpg can do sha256 and sha512 hashes based on what is > written in the docs. I think that we can categorize this task under "Advanced Features", how many un-skilled users need to compute sha2 digests of files? How many of them understand the term "command-line"? How many of them search in documentation before posting to Usenet/ML? > MD5SUM and SHA1SUM are spelled out as clear as day > in contrast to the ones I was trying to use. I had been using other > applications to get the values. Finding out the right syntax is different from having it under your own eyes and not seeing it. > Still, does anyone know what the coreutils docs are referring to when it > implies that sha512 hashes can be obtained with a command called > "sha512sum" in the same manner of usage as md5sum and sha1sum? > (i.e "sha512sum file") Maybe you could try to tell us what version of coreutils do you have installed and what OS are you using, we don't have a magic ball to ask. Two of your headers: > X-Mailer: Evolution 2.6.0 > Message-Id: <[EMAIL PROTECTED]> so I suppose you are using SuSE Linux, version 10.1 includes Evolution 2.6.0. Incidentally I am using the same version of this nice distribution, I have coreutils-5.93 here and there is no trace of sha2 support in documentation. However you should have noticed that this is not a linux mailing list. - -- Q.E.D. ICQ UIN: 301825501 OpenPGP key ID: 0x58D14EB3 Key fingerprint: 00B9 3E17 630F F2A7 FF96 DA6B AEE0 EC27 58D1 4EB3 Check fingerprints before trusting a key! -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.3 (GNU/Linux) iD8DBQFEiuYDH+Dh0Dl5XacRA+fXAJ9pcuMmMNgaqDKpiOdLX2fTwKO/bgCeOQmJ iIJ5nbjM3J8zIiDN/ngZo8Y= =9UW4 -END PGP SIGNATURE- ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: sha2 utilities: Print or check SHA-2 digests
On Sat, 2006-06-10 at 11:27 +0200, Qed wrote: > >>--print-md algo [files] > >>--print-mds [files] > >> Print message digest of algorithm ALGO for all given files > >> or > >> stdin. With the second form (or a deprecated "*" as > >> algo) > >> digests for all available algorithms are printed. > > > > Oh...I never would have made the connection. I can see what it > > refers to now but when I read it, the algorithm "ALGO" was one I had > > never heard of. Realistically, I wouldn't have caught it even if it was > > written as "--print-md [files]" > Ever heard of the funny story about the user calling helpdesk because > cannot find the "any key" on his keyboard? ;-) Yes, and supposedly it's causing problems for support departments. On the other hand, if you're looking for the command to calculate sha256 and sha512 hashes, what are the odds you will be targeting words like "ALGO"? "HASH" maybe, but "algo"? I'd be curious as to how many users even know that gpg can do sha256 and sha512 hashes based on what is written in the docs. MD5SUM and SHA1SUM are spelled out as clear as day in contrast to the ones I was trying to use. I had been using other applications to get the values. Still, does anyone know what the coreutils docs are referring to when it implies that sha512 hashes can be obtained with a command called "sha512sum" in the same manner of usage as md5sum and sha1sum? (i.e "sha512sum file") ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: sha2 utilities: Print or check SHA-2 digests
On Sat, Jun 10, 2006 at 01:15:33PM +0200, Johan Wevers wrote: > David Shaw wrote: > > > --print-mds [files] > > Print message digest of algorithm ALGO for all given files or > > stdin. With the second form (or a deprecated "*" as > > algo) > > digests for all available algorithms are printed. > > Why is * deprecated anyway? Seems usefull to me if you don't know the hash > used and want to check quick. The chance of a file being hashed with hash 1 > being tampered with so that it produces the same hash in hash algo B seems > pretty small to me. "--print-md * file" is deprecated in favor of "--print-mds". The functionality is still there. Just the name is different. David ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: sha2 utilities: Print or check SHA-2 digests
David Shaw wrote: > --print-mds [files] > Print message digest of algorithm ALGO for all given files or > stdin. With the second form (or a deprecated "*" as algo) > digests for all available algorithms are printed. Why is * deprecated anyway? Seems usefull to me if you don't know the hash used and want to check quick. The chance of a file being hashed with hash 1 being tampered with so that it produces the same hash in hash algo B seems pretty small to me. -- ir. J.C.A. Wevers // Physics and science fiction site: [EMAIL PROTECTED] // http://www.xs4all.nl/~johanw/index.html PGP/GPG public keys at http://www.xs4all.nl/~johanw/pgpkeys.html ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: sha2 utilities: Print or check SHA-2 digests
On 06/10/2006 12:35 AM, rmyster wrote: >>--print-md algo [files] >>--print-mds [files] >> Print message digest of algorithm ALGO for all given files or >> stdin. With the second form (or a deprecated "*" as >> algo) >> digests for all available algorithms are printed. > > Oh...I never would have made the connection. I can see what it > refers to now but when I read it, the algorithm "ALGO" was one I had > never heard of. Realistically, I wouldn't have caught it even if it was > written as "--print-md [files]" Ever heard of the funny story about the user calling helpdesk because cannot find the "any key" on his keyboard? ;-) -- Q.E.D. ICQ UIN: 301825501 OpenPGP key ID: 0x58D14EB3 Key fingerprint: 00B9 3E17 630F F2A7 FF96 DA6B AEE0 EC27 58D1 4EB3 Check fingerprints before trusting a key! ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: sha2 utilities: Print or check SHA-2 digests
On Fri, 2006-06-09 at 18:08 -0400, David Shaw wrote: > > > > The question was how to obtain these values with the commands listed in > > the coreutils documentation. Could point me to where you obtained these > > options since they aren't listed in the gpg docs(man gpg,info gpg, > > etc)? > > Man page: > >--print-md algo [files] >--print-mds [files] > Print message digest of algorithm ALGO for all given files or > stdin. With the second form (or a deprecated "*" as algo) > digests for all available algorithms are printed. > > David > Oh...I never would have made the connection. I can see what it refers to now but when I read it, the algorithm "ALGO" was one I had never heard of. Realistically, I wouldn't have caught it even if it was written as "--print-md [files]" Thanks again! ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: sha2 utilities: Print or check SHA-2 digests
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David Shaw wrote: > Man page: > >--print-md algo [files] >--print-mds [files] > Print message digest of algorithm ALGO for all given > files or stdin. With the second form (or a > deprecated "*" as algo) digests for all available > algorithms are printed. Would it be slightly more consistent to use hash instead of algo here? And/or to note somewhere that the list of available hash algorithms is the same as what's printed by gpg --version on the Hash: line? I imagine that with a slight amount of autofoo the same list that's printed by the --version option could be added to the man page here as well. - -- ToddOpenPGP -> KeyID: 0xD654075A | URL: www.pobox.com/~tmz/pgp == It is easier to fight for one's principles than to live up to them. -- Alfred Adler -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.3 (GNU/Linux) Comment: When crypto is outlawed bayl bhgynjf jvyy unir cevinpl. iG0EARECAC0FAkSJ+MsmGGh0dHA6Ly93d3cucG9ib3guY29tL350bXovcGdwL3Rt ei5hc2MACgkQuv+09NZUB1oJ/gCg6ExS7S8jOzfk2w0ikI8XNDiBzB4An1syS7PG 4fSw9FuAWYanWz/LtGEd =Y+pS -END PGP SIGNATURE- ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: sha2 utilities: Print or check SHA-2 digests
On Fri, Jun 09, 2006 at 03:57:59PM -0600, rmyster wrote: > On Fri, 9 Jun 2006 at 08:04:35 -0400, David Shaw wrote: > > > > Coreutils is installed but there isn't any sha224sum, sha256sum, > > > sha384sum or sha512sum commands available. Is sha2 utilities part > > of some other package? > > > > I'm not sure if I fully understand your question (coreutils has > > nothing to do with GnuPG), but GnuPG does have the SHA2 hashes: > > > > gpg --print-md sha256 (thefile) > > gpg --print-md sha384 (thefile) > > gpg --print-md sha512 (thefile) > > > > The next version of GPG will add: > > > > gpg --print-md sha224 (thefile) > > > > David > > > > The question was how to obtain these values with the commands listed in > the coreutils documentation. Could point me to where you obtained these > options since they aren't listed in the gpg docs(man gpg,info gpg, > etc)? Man page: --print-md algo [files] --print-mds [files] Print message digest of algorithm ALGO for all given files or stdin. With the second form (or a deprecated "*" as algo) digests for all available algorithms are printed. David ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: sha2 utilities: Print or check SHA-2 digests
On Fri, 9 Jun 2006 at 08:04:35 -0400, David Shaw wrote: > > Coreutils is installed but there isn't any sha224sum, sha256sum, > > sha384sum or sha512sum commands available. Is sha2 utilities part > of some other package? > > I'm not sure if I fully understand your question (coreutils has > nothing to do with GnuPG), but GnuPG does have the SHA2 hashes: > > gpg --print-md sha256 (thefile) > gpg --print-md sha384 (thefile) > gpg --print-md sha512 (thefile) > > The next version of GPG will add: > > gpg --print-md sha224 (thefile) > > David > The question was how to obtain these values with the commands listed in the coreutils documentation. Could point me to where you obtained these options since they aren't listed in the gpg docs(man gpg,info gpg, etc)? In any event, thanks. I'll just create some scripts to alias yours to what I was trying to use from the coreutils manual. ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: sha2 utilities: Print or check SHA-2 digests
On Fri, Jun 09, 2006 at 12:07:44AM -0600, rmyster wrote: > > >From the coreutils documentation, it states: > "6.6 sha2 utilities: Print or check SHA-2 digests > > The commands sha224sum, sha256sum, sha384sum and sha512sum compute > checksums of various lengths (respectively 224, 256, 384 and 512 bits), > collectively known as the SHA-2 hashes..." > - > > > Coreutils is installed but there isn't any sha224sum, sha256sum, > sha384sum or sha512sum commands available. Is sha2 utilities part of > some other package? I'm not sure if I fully understand your question (coreutils has nothing to do with GnuPG), but GnuPG does have the SHA2 hashes: gpg --print-md sha256 (thefile) gpg --print-md sha384 (thefile) gpg --print-md sha512 (thefile) The next version of GPG will add: gpg --print-md sha224 (thefile) David ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
sha2 utilities: Print or check SHA-2 digests
>From the coreutils documentation, it states: "6.6 sha2 utilities: Print or check SHA-2 digests The commands sha224sum, sha256sum, sha384sum and sha512sum compute checksums of various lengths (respectively 224, 256, 384 and 512 bits), collectively known as the SHA-2 hashes..." - Coreutils is installed but there isn't any sha224sum, sha256sum, sha384sum or sha512sum commands available. Is sha2 utilities part of some other package? TIA ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
