SHA-1 files by popular request

by phobos | December 19, 2008

We've received requests for .sha1 files in addition to .asc for our packages. Starting with, there are now .sha1 files in the appropriate dist directories. Displaying them on the download web page is still a bit tricky. The current layout leaves the page even more cluttered with .sha1 links all over it.

When you download a or later package, simply replace ".asc" with ".sha1" to get the hash file.

You'll then need to either "openssl sha1 {package}" or "sha1sum {package}" to see if the hash you downloaded matches the package you downloaded. Note: replace {package} with the name of the file you downloaded.


If you don't know what any of this means, start here.


Please note that the comment area below has been archived.


December 30, 2008


if you're going to use gpg, you might as well gpg --verify {package}.asc instead.

January 04, 2009


well i am not tat computer expert 2 do make tbb. u guys r very much expert in this thing coz u guys r working everyday on this project.i love tor& i use it reguarly maybe i will donate money sume day 4 improving tor. so ps update it