|
| disclaimer |
Jacksum 1.7.0
since 2002
Jacksum is a free and platform independent software for computing and verifying checksums, CRCs and message digests (known as hash values and fingerprints). "Jacksum" is a synthetic word made of JAva and ChecKSUM.
Jacksum supports 58 popular standard algorithms (Adler32, BSD sum, Bzip2's CRC-32, POSIX cksum, CRC-8, CRC-16, CRC-24, CRC-32 (FCS-32), CRC-64, ELF-32, eMule/eDonkey, FCS-16, GOST R 34.11-94, HAS-160, HAVAL (3/4/5 passes, 128/160/192/224/256 bits), MD2, MD4, MD5, MPEG-2's CRC-32, RIPEMD-128, RIPEMD-160, RIPEMD-256, RIPEMD-320, SHA-0, SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, Tiger-128, Tiger-160, Tiger, Tiger2, Tiger Tree Hash, Tiger2 Tree Hash, Unix System V sum, sum8, sum16, sum24, sum32, Whirlpool-0, Whirlpool-1, Whirlpool and xor8).
Jacksum supports the "Rocksoft (tm) Model CRC Algorithm", it can calculate customized CRC algorithms (all from 8 bit to 64 bit) and it supports the combination of multiple algorithms. Due to those features, millions of different new algorithms are possible.
Jacksum has opened it's source code and it is released under the terms of the GNU GPL. Jacksum is OSI Certified Open Source Software. OSI Certified is a certification mark of the Open Source Initiative.
Jacksum is platform independent, because it is written entirely in the Java programming language, the software runs on any platform having a Java Runtime Environment.
Jacksum has multiple interfaces. It can be used on the command line, at your file browser/manager, and it can be found as engine also in many other software projects.
Read what people around the world
think about Jacksum ...
Purpose:
With Jacksum you can check if a filetransfer was successful.
If you download software or huge files, like CD-images (so called iso files)
from the internet, often there is a checksum or a hashcode provided. With
Jacksum
you can calculate such a checksum or hashcode from your local copy. If
both checksequences are identical you know that the filetransfer was successful.
As Jacksum reads each byte of a file, you can check if all files are still readable on your CD-ROMs and DVDs.
As Jacksum supports recursively file processing, you can compare two directory trees. Therefore you will be able to verify, if your copies or backups are identical with the original source, even if you don't have access to both trees at the same time (compare two DVDs with just one drive for example).
Jacksum can assist you if you want to perform an unidirectional sync of two directory trees, even if they are on two different computer without a connection in between.
As Jacksum supports a platform independent and compatible file format, it helps you to verify data integrity of burned data on CD-ROMs or DVDs even after many years and even if you will have changed your Operating System.
Jacksum can help you to create incremental backups.
If you are a developer, Jacksum can help you to create patches for your customers.
You can use Jacksum for intrusion detection, because Jacksum can check whether and what files have been changed or deleted on your system. Jacksum can not only check the content of each file you want, but also the file timestamps.
Use Jacksum for website content change detection, so get informed if something has changed on your favorite website (can be useful if the website has no announcement-mail-alias).
For detailed information please read section FAQ.
Features:
Really free software:
- It is Free Software, it runs also on entirely free platforms, therefore it is listed also at the Free Software Foundation directory
- Jacksum's license guarantees freedom to the users, and if you want to make a project based on Jacksum, I encourage you to respect the GPL so that those freedoms can continue to be free
- It is OSI Certified Open Source software
- It is free of charge, it costs nothing, if you have some money left, please give it to a human helper organization
- It is free of advertisement, but you can tell your friends about Jacksum
- It is free of expirations, you can use it at any time, and for ever
- It is free of registration, but I'm happy if you write a few words to jonelo@jonelo.de just for feedback
- It is platform independent (100 % Java), so you can run it on all common operating systems, such as Windows (95/98/ME/NT/2000/2003/XP/Vista), Linux (Debian, Fedora, Gentoo, JDS, Knoppix, Linspire, Red Hat, Slackware, SUSE, Turbolinux, Mandriva, Ubuntu, etc.), Unix (BSD, HP-UX, Mac OS X/PPC, Mac OS X/x86, Solaris/SPARC, Solaris/x86, etc.) or any other operating system (e.g. OS/2) with a Java Runtime Environment (JRE). Do you want to live with your current operating system for ever?
- Keeps compatibility with JRE 1.3.1, but takes all the advantages of JRE 1.4.2, JRE 5.0 or JRE 6 if available, runs also on entirely free platforms with latest versions of gij or kaffe
- Runs on both 32 and 64 bit systems. Yes, Jacksum is 64 bit ready, you just need a 64 bit JRE.
- It is large file aware, it can process filesizes up to 8 Exabytes (= 8,000,000,000 Gigabytes), presupposed your operating system respectively your file system is large file aware, too.
- As it has a commandline interface, Jacksum can be used in cronjobs and autostart environments
- It is aware of special files like FIFOs and symbolic links on Linux/Unix and system folders on Windows
- Works with the SendTo-feature on Windows Explorer, KDE Konqueror and Gnome Nautilus
- Supports 58 popular checksum algorithms including strong one-way-hash algorithms (Adler32, BSD sum, POSIX cksum, Bzip2's CRC-32, CRC-8, CRC-16, CRC-24, CRC-32 (FCS-32), CRC-64, ELF-32, eMule/eDonkey, FCS-16, GOST, HAS-160, HAVAL (3/4/5 passes, 128/160/192/224/256 bits), MD2, MD4, MD5, MPEG-2's CRC-32, RIPEMD-128, RIPEMD-160, RIPEMD-256, RIPEMD-320, SHA-0, SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, Tiger-128, Tiger-160, Tiger, Tiger2, Tiger Tree Hash, Tiger2 Tree Hash, Unix System V sum, sum8, sum16, sum24, sum32, Whirlpool-0, Whirlpool-1, Whirlpool and xor8)
- It can calculate customized CRC algorithms and it also supports the combination of multiple algorithms
- Fully customized output is supported
- It can calculate checksums, CRCs and hashes on both files and user input sequences (text, hexadecimal and decimal)
- The program is mature and very stable
- Algorithms are very fast (go ahead, and compare Jacksum's performance with similar tools)
- Recursively file processing is supported (it operates not only on files from a specific directory, but also on files from all subdirectories of the specified directory)
- It can verify both the content and timestamp of files
- It helps you to find duplicates by knowing just only the checksum of a file
- By default, output is 100% compatible to Unix-standard tools such as sum, cksum, md5sum and sha1sum
- File output format is flexible and fully customizable (add filesizes to the md5 output, create SFV files, XML data or create lists with the eDonkey-Link format for example)
- Additionally, the .jacksum file format is supported (it is an open, platform independent and compatible file format, so you will be able to check files and timestamps against a list even after many years and even if you have changed your Operating System!)
- Multiple Encodings (hex, BASE 16, BASE 32, BASE 64 and BubbleBabble) for all checksums, CRCs and hashes are supported
- Jacksum has been downloaded more than 15000 times the past 12 months
- Jacksum has been incorporated in many other free projects
- The Jacksum project has both a great and active community, it consists of both users and developers, all of them providing bug reports, support and feature requests, Jacksum users have brilliant ideas (see also History)
- It returns an exit status which is dependent on the result of the calculation/verification process, so you can use Jacksum in scripts or batches
- Jacksum provides an open API, so you can incorporate Jacksum in your own projects
- Javadoc can be generated from the sources
- Ant-script is available which is also ready for use with Netbeans
Jacksum 1.7.0 Copyright (C) 2002-2010
Dipl.-Inf. (FH) Johann Nepomuk Löfflmann
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General
Public License as published by the Free Software Foundation; either
version 2 of the License, or any later version. This program is distributed
in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even
the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
PURPOSE. See the GNU General
Public License for more details. See also FAQ .
To run Jacksum, you need a Java Runtime Environment (JRE). You can
get it for free. It is required to have at least the JRE version 1.3.1,
but it is recommended to install JRE 6 or later. Download
a suitable JRE for your operating system.
Download:
Jacksum is written entirely in Java
,
therefore it is platform independent and runs on all operating systems
having a Java Runtime Environment.
Read the sections Requirements and Copyright
. You have to read and accept the GNU
General Public Licence if you want to download and use Jacksum. The
file also contains all the sourcecodes.
 jacksum-1.7.0.zip
(July 30, 2006)
MD5:
f1cf99f9e2b68016668dce4c4d51d346
|
Optional:
| jacksum-1.7.0-windows-explorer-integration-1.3.0.zip
(August 14, 2010) Filesize: 225913 bytes works for the Windows Explorer on Windows NT/2000/2003/XP/2008/Vista/7
MD5: cdbeee4cba45756d07dbae73d382e9d5 SHA1: 64611552d71ed3b11d2c62474565bbf2f25db998 SHA256: 459d52f12c5b0dd6a205240637a9bbf31a60832af8b011d1226bd881fbcbc5a2 works for Gnome Nautilus 2.x (e.g. on Ubuntu), Konqueror on KDE 3.x, Konqueror on KDE 4.x and Dolphin on KDE 4.x (e.g. on Kubuntu), Thunar (XFCE, e.g. on Xubuntu), and ROX-Filer 2.x (e.g. on Puppy Linux)
MD5: 9e87bc974279f9eca84a382392e0da0b SHA1: 22874026f1b06300e7d807431c428d1a5c6dfe23 SHA256: 406bc27a23e98bb07cb7c029fab44e207c89c6c0148228abde5fe93113c9fd60 This script has been tested on Mac OS X 10.4 (Tiger), Mac OS X 10.5 (Leopard) and Mac OS X 10.6 (Snow Leopard) for the Finder Application. |
All optional packages above contain an installer for a specific environment
as well as the the jacksum binary.
You can obtain older releases at sourceforge.net
1. Go to www.java.com and install the latest Java Runtime Environment, see also Requirements.
2. Download and unzip the file called jacksum-1.7.0.zip. If you are on Windows, visit the GnuWin32 project page to obtain a free unzip tool.
cd installdirectory
unzip jacksum-1.7.0.zip
3. Start Jacksum in a terminal by typing
cd installdirectory
java -jar jacksum.jar
4. For more comfort, if you would like to start Jacksum just by typing
jacksum
you have to modify the launch script which is part of this distribution
and place it in a folder which is reachable within your PATH environment
variable (see see FAQ called How do I launch Jacksum, just
by typing 'jacksum').
Why should I use Jacksum rather than ...?
Your data is one of the most important things you own. Jacksum helps
you to keep control of the integrity of your data and. Jacksum is very
stable and reliable and it provides a lot of unique features. If you are
clever, you are going to compare the features of those tools with Jacksum's
feature
list above and you will be able to answer the question above by your
own ;-)
In addition to the standard command line interface, the Jacksum project supports also the integration into the famous file browsers Windows Explorer, KDE Konqueror, Gnome Nautilus, ROX-Filer and the Finder on Mac OS X.
There is more and more effort going on. Five studends from the ETH Zürich, Switzerland have been working on a SWT based prototype GUI for Jacksum. In addition to the continued improvements for the file browser integration, it is planned to create a Swing based GUI for Jacksum, because SWT isn't available on each platform.
Jacksum's primary user interface is and will be the commandline, as it provides compatibility with other popular command line tools available on Unix, like cksum, sha1sum, sum and md5sum. The commandline interface allows you also to use the tool also easily with cronjobs, in scripts, in file browsers, in web interfaces and of course in combination with pipes and other useful tools like grep, sort, uniq, tar, bzip2, gzip and zip.
Jacksum also supports a public API. It can be used by a Graphical User
Interface (GUI) for example.
See also "Can I incorporate Jacksum into my
project?" and "Software which incorporates
Jacksum".
How do I launch Jacksum, just by typing "jacksum"?
Under UNIX define an alias or write a script that contains just the
two lines:
#!/bin/sh
java -jar "/path to jacksum/jacksum.jar"
"$@"
Make sure, that the script is reachable from the PATH and execute permissions are set correctly (man chmod).
Under Windows write a batch, it should be reachable from the PATH:
@echo off
java -jar "c:\path to jacksum\jacksum.jar"
%*
The Windows Explorer Integration creates the batch above for you.
How can I use Jacksum with the Windows Explorer?
Download the file for Windows, and run the included installer. It will install the most used features of Jacksum at the Windows Explorer. During the installation also an uninstaller is created which can be used to remove the feature again. The installer and uninstaller don't touch the registry. Simply select files at the Windows Explorer, click on the right mouse button and select a Jacksum menu entry from the "Send To" menu to calculate and verify CRCs, hashes and fingerprints.
The picture above shows the Jacksum Windows Explorer Integration 1.1.0. Since Windows Vista it is not possible anymore to use directories for grouping of executables. Therefore the Jacksum-entries start one level earlier since the Windows-Explorer Integration 1.2.0 für Jacksum as shown below.
How can I use Jacksum with KDE Konqueror?
Download the file for Linux/Unix (KDE), and run it:
bunzip2 < jacksum-*.bz2 | tar xfv -
cd jacksum-file-browser-integration/
./jacksum-file-browser-integration.sh
The interactive script will help you to install (and uninstall) features of Jacksum at the KDE Konqueror. The screenshot below has been taken from SUSE Linux 10.
How can I use Jacksum with Gnome Nautilus?
Download the file for Linux, extract it and run the script:
bunzip2 < jacksum-*.bz2 | tar xfv -
cd jacksum-file-browser-integration/
./jacksum-file-browser-integration.sh
The interactive script will install (and uninstall) features of Jacksum at the Gnome Nautilus. The script works on both Linux and Solaris. The screenshot below has been taken from Ubuntu Linux 5.10:
How can I use Jacksum with ROX-Filer (e.g. with Puppy Linux) ?
Download the file for Linux, extrat it and run the script:
bunzip2 < jacksum-*.bz2 | tar xfv -
cd jacksum-file-browser-integration/
./jacksum-file-browser-integration.sh
The interactive script will install (and uninstall) features of Jacksum at the ROX-Filer. The screenshot below has been taken under Puppy Linux 4.3.1 with the ROX-Filer 2.6.1. The SendTo menu is easily opened by right-clicking over a file with the Shift key held down.
I have installed the Jacksum File Browser Integration for ROX on Puppy Linux, but if I select "All algorithms" nothing happens.
On Puppy Linux the /usr/local/bin/java binary is incompatible to the Java Standard.
Install a Java Standard compatible Runtime Environment, OpenJDK for example.
How can I use Jacksum with Finder under Apple Mac OS X ?
First of all, you must activate the Apple built-in Script Menu using the AppleScript Utility
in your AppleScript folder.
Since Mac OS 10.6 (Snow Leopard), the Script Menu preferences are now in AppleScript Editor’s preferences, in the General tab.
Then, download the file for Mac OS X, extrat it and run the script:
bunzip2 < jacksum-*.bz2 | tar xfv -
cd jacksum-macosx-finder-integration/
./install.command
Or simply use Finder in order to extract the files and execute the install.command script.
After you have run the integration script, you can select files in Finder and select a checksum/hash algorithm from the Apple script menu as shown below:
For those who prefer to setup scripts manually, here is an applescript in order to calculate the sha256 hash from the files you select in Finder:
| tell application "Finder"
set theseItems to the selection end tell set allFiles to "" repeat with i from 1 to the count of theseItems set thisItem to(item i of theseItems) as alias set thisFile to POSIX path of thisItem set allFiles to allFiles & " " & thisFile end repeat set theCommand to "jacksum -a sha256 " & allFiles & " > /tmp/jacksum.txt" do shell script theCommand property targetURL : "file:///tmp/jacksum.txt" open location targetURL |
How can I use Jacksum on the GNU Midnight Commander ?
On Windows, you can integrate Jacksum into the MC by running the Windows Explorer Integration and then simply adding the following lines to the MC user menu (mc.mnu):| J Jacksum set ALGO=%{Enter Algorithm (cksum, sha1, md5, ...)} call "%%USERPROFILE%%\Jacksum Windows Explorer Integration\jacksum.bat" -a %%ALGO%% %s pause |
On Linux, add the following lines to the user menu (.mc.menu):
| J Jacksum ALGO=%{Enter Algorithm (cksum, sha1, md5, ...)} /usr/bin/jacksum -a ${ALGO} %s echo -n "Enter any key to continue ..." read DUMMY |
Why should I use at least JRE 1.4.2 ?
Jacksum run on JRE 1.3.1 and any later release. However, if you use
at least JRE 1.4.2 you will notice a faster program start and the faster
algorithms SHA-256, SHA-384 and SHA-512 (those are known as SHA-2) from
your JRE can be used. It is recommended to use the latest JRE. Download
it from http://java.sun.com/javase.
By using JRE 5.0 or JRE 6 you get even more performance for Jacksum.
What's the meaning of the Jacksum output?
e. g..
599770357 23560 foo.txt
The first number represents the CRC, checksum or hash. It depends on the algorithm you use (option -a) and whether you have specified the hex option (option -x, respectively option -X). The second number represents the filesize, usually in bytes. Exceptions are both algorithms BSD sum and UNIX system V sum, they print the filesize in blocks. The filesize will be not written by any One-Way-Hash based algorithm (e. g. SHA1, MD5, etc.), because the filesize is already incorporated into the message digest. The third column (it's the second one if you have specified a One-Way-Hash based algorithm) represents the filename. The filename will not be written if the standard-input device is used.
With Jacksum 1.3.0 you have the option to print the timestamp from files. In this case an additional column appears in each line (just before the filename). The meaning of the timestamp is dependent on the format you set (option -t).
599770357 23560 20031027140042 foo.txt
Since Jacksum 1.5.0 you have the full control on the output by
using the option -F.
With option -a you can choose one of many algorithms. If you got a file from a trusted source and you only would like to know if a file transfer was successful, many algorithms can be used. However, for a really save file integrity check and verification on thousands of files on today's harddisks (see also option -c), not all algorithms are suitable in this case.
Don't use:
From a cryptographic point of view, it is recommended not to use the
following algorithms, because they don't care about the arrangement of
bytes in a file: sum8, sum16, sum24, sum32 and xor8. Furthermore you shouldn't
use MD2 or MD4, because RSA doesn't recommend to use them anymore. SHA-0
is also weak, it was replaced by SHA-1 in year 1995.
Limited usability:
All checksum and CRC based algorithms like Adler32, BSD sum, POSIX
cksum, CRC-8, CRC-16, CRC-24, CRC-32 (FCS-32), FCS-16, MPEG-2's CRC-32,
CRC-64, the generic CRC and the Unix System V sum do not have the bit strength
and the mathematical power to guarantee strong fingerprints for thousands
of files on today's harddiscs. See also the CRC-Faker
and read the article "CRC and how to Reverse it" (http://surf.to/anarchriz).
Viruses could be able to fake files - with a CRC based algorithm you cannot
detect such intruders. Although Jacksum is able to produce SFV on demand,
it is highly recommended to avoid using SFV files. They are based on CRC32
values and SFV doesn't take the filesize into account. SFV is really history.
Not really recommended:
ELF-32 is a very simple hash based algorithm and has not the bit strength
for save file integrity checks, probably. The Whirlpool has been replaced
two times by a new Whirpool. The algorithm eMule/eDonkey (MD4 based, but
improved) would have enough bits, but even for the widely used MD5 and
HAVAL_3_128 real collisions have been detected already (http://eprint.iacr.org/2004/199/)
in August 2004 (with a non-brute force method). The paper also mentions
collisions for the full RIPEMD-128, however the hexdump example in the
doc doesn't generate a collision (while all the other examples in the doc
have been verified, the RIPEMD hexdump example seems to have a typo). For
an excellent example of a MD5 collision go to http://www.cits.rub.de/MD5Collisions.
Note that RIPEMD-256 is as secure as RIPEMD-128 so it is also not recommended.
Tiger/128 and Tiger/160 are truncated hash functions of Tiger/192. Although
they seem to be save today, the non-truncated has functions are more secure.
SHA-1
In February 2005, Bruce Schneier reported an attack by Xiaoyun Wang,
Yiqun Lisa Yin, and Hongbo Yu. The attack is outlined in a brief note by
the authors. The authors assert that their attacks can find collisions
in the full version of SHA-1, requiring less than 269 operations
(a brute-force search would require 280). In academic cryptography,
any attack that has less computational complexity than the expected time
needed for brute force is considered a break. This does not, however, necessarily
mean that the attack can be practically exploited. So in the real world,
the SHA-1 is still secure, at least for verifying integrity. For latest
cryptanalysis of SHA-1 read http://en.wikipedia.org/wiki/SHA1#Cryptanalysis_of_SHA-1.
Recommended:
From a today's cryptographic point of view (October 2006), the following
one-way-hash algorithms are save to perform file integrity checks: HAVAL-{3/4/5}-{160/192/224/256},
RIPEMD-160, RIPEMD-320, SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, Tiger,
Tiger2 and the second revision of Whirlpool. Jacksum supports all those
algorithms. Since Jacksum 1.5.0, the algorithm SHA-1 is the default.
Since Jacksum 1.7.0 you can combine multiple algorithms together. I
recommend to combine at least two different techniques, a hash algorithm
such as SHA-1 and a CRC such as CRC32 are a very good combination for file
integrity checks. Even if a collision will be found in the future for a
hash based algorithm, it is very unlikely that also a CRC returns equal
values in this case.
Why are there alternate implementations available?
A few algorithms (adler32, crc32, md5, sha-1) are part of the standard
Java API. A few others (sha-256, sha-384, sha-512) are part of a newer
Java API. If an algorithm is provided by your JRE, Jacksum is just
calling the API and use the algorithm which is offered by the JRE. Some
vendors of the JRE are calling native code which results usually in a good
performance. But note, that this is the implementation detail of the vendor
of a JRE and can be vary from vendor to vendor and from version to version.
Due to several requests I also provide alternate, pure Java implementations
for all of the algorithms which are usually covered by the Java API. On
some systems an alternate implementation can perform much better (the MD5
for example), but this depends on the performance on your computer and
on the Java Runtime Environment you use. Usually it is a good idea to use
the latest JRE and rely on the performance the JRE can offer. Tests have
shown that the newer your JRE, the better the performance. In some cases
with the option -A you get better performance.
Are CRCs obsolete today ?
No, CRCs are still used in hardware, firmware, protocols, simple software
installers (NSIS for example) and today's filesystems (ZFS on Solaris for
example). Usually they are fast (and not so complex like one-way-hashes),
and they are useful to verify a small amount of data. Furthermore, they
are a very good addition to hash based algorithms. Jacksum supports the
"Rocksoft (tm) Model CRC Algorithm" which
makes it possible to calculate any customized CRC.
How is a CRC calculated ?
A lot of people were asking me this question. Well, there are some good
websites explaining how CRC is working. Go to http://surf.to/anarchriz
or ftp://ftp.rocksoft.com/papers/crc_v3.txt. You also might have a look
at the sourcecode of Jacksum.
Does Jacksum support the CCITT checksum algorithm ?
Many references define the CRC-16/CCITT as
crc:16,1021,FFFF,false,false,0
The notation "crc:width,poly,init,refIn,refOut,xorOut" is used since Jacksum 1.7.0 to specify a CRC algorithm according to the Rocksoft(TM) Model CRC Algorithm. Using the message 123456789, a CRC algorithm with the parameters above returns 0x29B1:
jacksum -q txt:123456789 -a crc:16,1021,FFFF,false,false,0
-X
29B1
However, other sources claim that according to the CCITT standard (see above), a message must be prepended with 16 zero bits before the calculation. This interpretation of the standard can be expressed as
crc:16,1021,1D0F,false,false,0
Notice, that in this case only the init value is different, because using a 16 bit zero message, a CRC with the init parameter 0xFFFF returns 0x1D0F which is the init value for the alternate interpretation of the algorithm.
Using the message 123456789, a CRC algorithm with the parameters above returns 0xE5CC:
jacksum -q txt:123456789 -a crc:16,1021,1D0F,false,false,0
-X
E5CC
Well, it is entirely up to you to select the CCITT standard you believe
;)
Jacksum is able to calculate both algorithms (and even any other interpretation
of this "standard").
I receive the error "java.io.IOException: Data error (cyclic redundancy check)". What does that mean?
This is an error produced by Windows (NT based) and means that Windows
is not able to read files from your CD-ROM or DVD. Therefore also Jacksum
can't read those files. You should copy all readable files which resides
on the same media to a new CD-ROM or DVD to avoid further data loss. Under
Linux you receive the error called "java.io.IOException: Input/output error"
(example from Red Hat).
What algorihms are currently not supported by Jacksum?
There are still a lot of algorithms not (yet) supported by Jacksum.
Those are called Cellhash, Boognish, DHA-256, FEAL (patented), FFT-hash,
FORK-256, Panama (broken), Snefru (broken), DSS1, MAA (Message Authenticator
Algorithm, broken), MDC2 (Patent ended), Maelstrom-0, Maelstrom-1, Maelstrom,
N-Hash (patented, insecure), PMD-N, PMD-V, PMD-128, PMD-160, PMD-192, PMD-224,
PMD-256 (korean standards, no complete english docs are available), RadioGatún,
VEST-4, VEST-8, VEST-16, VEST-32 (patent pending), VMS/VAX checksum (very
little information available), VSH. If you own sourcecode to one of those
algorithms (Java sourcecode is preferred of course), please just send them
to me and I will test, optimize and include them for a next release of
Jacksum. Notice, that most of those "not yet supported algorithms" are
not really strong, have usage restrictions due to patents and for most
of them collisions have been detected or they are already broken. Nevertheless
they are on my wishlist for educational and completeness purposes.
A friend of mine has a machine that I think is hacked/infected, but I don't have such a machine to compare it to ...
You can find all checksums of most popular UNIX and Linux operating
systems at http://www.knowngoods.org
For Solaris go to http://sunsolve.sun.com/pub-cgi/fileFingerprints.pl
I haven't found such a service for Windows.
How do I sync two folders on two different computers?
With Jacksum, you can perform an unidirectional synchronization, e. g. if you want to sync two folders on two different computers, even without a connection in between, Jacksum can help you to solve that kind of problem. Let's imagine that you have a good and a faulty computer.
Example for Windows:
1. Change to the good folder on the good computer and execute the command
cd good
jacksum -a sha1 -m -r . > c:\temp\check.jacksum
2. The file called check.jacksum represents a snapshot of all files
on the good computer from the good folder.
Transfer the file called check.jacksum
file to the faulty computer.
3. Change to the folder on the faulty computer and execute the command
cd faulty
jacksum -c c:\temp\check.jacksum -l > c:\temp\files.list
4. The file called files.list now contains a file list of differences.
Transfer the file called files.list to
the good computer.
5. Change to the good folder on the good computer again and execute
the command
cd good
type files.list | zip
-@ patch.zip
In case you prefer .tar.bz2 rather than .zip:
cd good
tar
cfv patch.tar -I files.list
bzip2
-9 patch.tar
6. The file called patch.zip respectively patch.tar.bz2
contains all files from the good computer which were modified or deleted
on the faulty computer. Transfer the file called patch.zip respectively
patch.tar.bz2
to the faulty computer and extract the files included in the zip to the
faulty folder. The faulty folder on the faulty computer become a good folder
and you fixed the problem on the faulty computer.
How do I create a patch with Jacksum?
As being a developer you might provide a patch to your faithfully customers so they can upgrade easier. Jacksum can help you in this case.
Example for Unix/Linux:
1. Change to your new version's folder
cd ~/newversion
jacksum -a sha1 -f -m -r . > /tmp/check.jacksum
2. Change to your old version's folder
cd ~/oldversion
jacksum -c /tmp/check.jacksum -l > /tmp/files.list
3. Change to your new version's folder again and zip the original files
cd ~/newversion
tar cfv patch.tar -T /tmp/files.list (GNU/Linux,
Mac OS X, PC-BSD)
tar cfv patch.tar -I /tmp/files.list (PC-BSD,
Solaris)
bzip2 -9 patch.tar
In case you prefer .zip rather than .tar.bz2:
cd ~/newversion
cat /tmp/files.list | zip -@ patch.zip (GNU/Linux, Mac
OS X, Solaris)
Thanks to Girish Narang who collaborated with me on developing a patch
creator solution with Ant. Download the Ant script
and a corresponding property file to create
patches with Jacksum and Ant.
It is possible to compare two directory trees or even discs?
Yes, there are multiple ways to do that. I recommend the first way.
1. Since Jacksum 1.3.0 you can use the option -c to check files against a given list, so you will exactly know which file has been modified or deleted. You create such a list with option -m. See the following example (batch file for windows). Notice, that you can also compare two directories or even discs even if they are on two different computers without a connection in between! See also How do I sync two folders on two different computers?
Example for Windows:
| @echo off
:: usage: dircmp dir1 dir2 :: dir2 may be also on a different drive set ERRORLEVEL= if not exist %1 goto error if not exist %2 goto error set BACKUP=%CD% call jacksum -a sha1 -r -f -O %TEMP%\tmp.jacksum -U nul -m -w %2 cd %1 call jacksum -c %TEMP%\tmp.jacksum rem echo %ERRORLEVEL% cd %BACKUP% goto end :error echo direcotry does not exist :end |
2. Execute the following commands on both directories (it is important to change the directory with cd first):
cd <the directory you want to check>
jacksum -r -f -a sha1 . | jacksum -a sha1 -
If both checksums are equal, you will know, that both directories (including subdirectories) are equal.
3. Since Jacksum 1.5.0 there is the option -S to get just one checksum back. You don't need the pipe mechanism anymore.
cd <the directory you want to check>
jacksum -a sha1 -f -S -r .
Why do I receive different checksums with -S on two identical folders?
It makes a difference if you calculate a checksum on c:\data or d:\data for example, because Jacksum takes those differences into account. If you don't want Jacksum to incorporate the (absolute) path information you have given at the commandline, you must change the current working directory first or use option -w. I recommend to specify relative paths like "data" (if the current directory is c:\) or "." (if the current directory is c:\data) rather than "c:\data". If you perform the calculation on d: you must use the same parameters you have used on drive c:. See also feature request #1028816.
wrong expectation - all checksums will be different:
jacksum -a sha1 -S c:\data
jacksum -a sha1 -S d:\data
jacksum -a sha1 -S d:\backup\data
correct usage - all checksums will be equal, assumed that files and folders are really identically:
jacksum -a sha1 -S -w c:\data
jacksum -a sha1 -S -w d:\data
jacksum -a sha1 -S -w d:\backup\data
OR
c:
cd \data
jacksum -a sha1 -S .
d:
cd \data
jacksum -a sha1 -S .
cd \backup\data
jacksum -a sha1 -S .
Why do I receive different checksums with -S on Windows and Linux?
I have a share partition. It is formatted as FAT32 so I can access files from both Linux and Windows. If I use the option -S, I get different checksums on a particular subtree on Linux and Windows. What's wrong?
Usually this happens if you have suboptimal mount options. If your share
partition is mounted as "vfat" under Linux you should also specify the
mount option called "shortname". It defines the behaviour for creation
and display of filenames which fit into 8+3 characters. The mount option
is necessary, because the Jacksum option -S incorporates also the filenames
into the checksum. For more information see also "man mount". Alternatively
use the Jacksum options -m and -c to verify files in a platform- (and mount
option) independent way.
I got bash: !": event not found
jacksum -a crc32 -q "txt:Hello World!" gives me:
bash: !": event not found
Actually this is a bash shell issue. The ! in bash has a special meaning by default, it is the history expansion character. You can reproduce it also with echo.
$ echo "!"
bash: !: event not found
$ echo "\!"
\!
$ echo \!
!
Therefore the correct usage is
jacksum -a crc32 -q "txt:Hello World"\!
472456355 12
However, this syntax is not very comfortable. Fortunately using single quotes will also solve the trouble:
$ echo '!'
!
jacksum -a crc32 -q 'txt:Hello World!'
472456355 12
See also the manpage of bash "Enclosing characters in single quotes
preserves the literal value of each character whithin the quotes".
How can I use Jacksum for website content change detection?
Let's assume that you would like to get informed about any modifications on this web page (http://www.jonelo.de/java/jacksum).
1. Preparation: Get the web page with the command called wget, and store
the web page to your hard disk by specifying a suitable name (rather than
index.html) and calculate a hash from the file:
wget http://www.jonelo.de/java/jacksum/index.html -O MyFavorite
jacksum -a sha1 -m MyFavorite > websites.jacksum
2. Check frequently: Download the page again and check the web page
content's checksum against the checksum you have stored previously.
wget http://www.jonelo.de/java/index.html -O MyFavorite
jacksum -c websites.jacksum
[OK] MyFavorite
3. To fresh up the checksum in file website.jacksum, just repeat step 1 again.
As Jacksum can store multiple checksums in a .jacksum file, you can
build your own website content change detection system for all your favorite
websites on the net. Use scripts and cronjobs to make life easier. If your
wget-download triggers a change on a webpage (a text counter for example),
you will be informed about the change that you have caused. To avoid this
problem, you must cut off this information from the file, before you calculate
a checksum from the file (use grep -v or regular expressions for this task).
Can I incorporate Jacksum into my project?
Yes, but Jacksum is not "public domain", and Jacksum is not "freeware".
Jacksum is free software
which is compliant with the Free Software Foundation idea. Jacksum is distributed
under the terms of the GNU General Public License (GPL), as published by
the Free Software Foundation (FSF) - GPLv2 or later. If you develop a program
that is based on Jacksum, the program must be compatible with the GPL.
It is against all policies, if you use Jacksum's source code, and put it
in a closed source project, and/or claim it as yours. Jacksum's sources
are free and must be free for ever, and you should respect this freedom.
Once you have understand the advantages of openess, you have done a step
to a greater world.
Are there any academic publications which
mentions Jacksum?
Yes, and I would like to thank them very much!
- Praktische Anwendung Kryptographischer Prüfsummen; Peter Jockisch, November 2009
- Spring Recipes - A Problem-Solution Approach, Chapter 13 Spring Security, page 485, ISBN 978-1-59059-979-2 (Print) 978-1-4302-0623-1 (Online), DOI 10.1007/978-1-4302-0623-1, August 2008
- A Management Platform for Tracking Cyber Predators in Peer-to-Peer Networks; by Remi Badonnel, Radu State, Isabelle Chrisment, Olivier Festor (IEEE, Digital Object Identifier: 10.1109/ICIMP.2007.2); July 16, 2007
- Chord and Symphony: An Examination of Distributed Hash Tables and Extension of PlanetSim; Monica Haladyna Braunisch; A Thesis in the Field of Information Technology for the Degree of Master of Liberal Arts in Extension Studies; Harvard University; June 2006
- Elektronische Vertragsunterzeichnung und Archivierung in einer Webapplikation; Hans Engler; Diplomarbeit edu swiss; September 2003
Software which incorporates the latest
version of Jacksum
This section includes links to software that incorporates Jacksum
or can deal with .jacksum files:
Note, that there the applications below don't support all the features
that the commandline offers, but they can help you to use Jacksum if you
don't like the commandline :) - list updated on February 25, 2008
- NumericalChameleon 2.0.0 (not released yet) - GNU GPL, a platform independent unit converter for the desktop, will be powered by Jacksum 1.7.0, it will compute hashes from strings only
- Jacksum File Browser Integration - http://sourceforge.net/projects/jacksum - GNU GPL, the installers from Oct 8, 2006 add Jacksum's primary features to file browsers, it is powered by Jacksum 1.7.0.
- http://publictimestamp.org - http://publictimestamp.org - GNU GPL, PublicTimestamp.org offers the free service to timestamp any publicly available digital document, latest client version is from April 25, 2007 and it is powered by Jacksum 1.7.0.
- Hasher GUI - http://sourceforge.net/projects/hashergui - GNU GPL, a Swing GUI for Jacksum, the latest version is 0.3 from Jan 30, 2007 and it is powered by Jacksum 1.7.0
- TWCheckSum - http://www.wenzlaff.de/twchecksum.html - GNU GPL, a Swing GUI powered by Jacksum 1.7.0, the latest version is 0.9 from Feb 25, 2008
- UPX Autoupdate for Firefox/Thunderbird - http://sourceforge.net/projects/upxau - GNU GPL, powered by Jacksum 1.7.0, the latest version is 1.0 beta 3 from Feb 3, 1008
- DuMP3 - http://dump3.sourceforge.net - GNU GPL, the software finds any duplicate or similar file, the latest version 0.2.16 beta is from August 10, 2007, and is powered by Jacksum 1.6.1.
- Prevalent Digest Creator - http://www.prevalent.de - GNU GPL, the software from Jan Kechel is powered by Jacksum 1.6.1. It provides a free service to store digests on a server - GNU GPL, the latest version 1.1.0 is from Jan 11, 2006.
- Serversniff Hash Calculation - http://serversniff.net - Online-Tool powered by Jacksum 1.6.1 to compute hashes from strings, the latest version is from Nov 11, 2005
- Real Public Radio Network - www.rprn.org - the software is powered by Jacksum 1.5.1. RPRN is a non-profit organization creating a networked community to support the exchange of digital audio content - the latest developer version is from May 3, 2005.
- OntoMedia - http://www.ontomedia.de - is a multimedia management system developed by Bodo Hüsemann at the University of Muenster. It uses Jacksum 1.5.0, see also credits
- MD5 GUI - http://sourceforge.net/projects/md5gui - the software from John Brown provides a nice GUI and is powered by Jacksum 1.5.1 (only the MD5 algorithm is from a different vendor due to historic reasons), GNU GPL, the latest version 0.97 is from Jan 29, 2005
- xfdu - http://sindbad.gsfc.nasa.gov/xfdu/ - xfdu stands for extensible data packaging format, and it is an implementation of the Recommendation for Space Data System Standard by the Management Council of the Consultative Committee for Space Data Systems (CCSDS) which is a departement of the National Aeronautics and Space Administration (NASA), and it uses Jacksum 1.4.0 (see also dependencies)
- Java Mechanic - http://sourceforge.net/projects/javamechanic - the software bundles Jacksum 1.2.0, the project can be useful if you are a developer - GNU GPL, the latest version 3.0 is from April 4, 2004
- JavaIntegrity - http://sourceforge.net/projects/javaintegrity/ - It is a commandline tool and is powered by Jacksum 1.1.0. Features from JavaIntegrity 1.1 are already covered by later Jacksum versions - GNU GPL, the latest version 1.1 is from Oct 27, 2002
- TrID - http://mark0.net/soft-trid-e.html - Marco Pontello's file identifier for Windows knows .jacksum files
- file - the file command on Unix/Linux can be made aware of .jacksum files, if you append the "jacksum.magic" to your /etc/magic
Do you have any code examples of using the Jacksum package in another tool?
Yes, the quintessential snippet is here:
|
import java.io.*; import java.security.*; import jonelo.jacksum.*; import jonelo.jacksum.algorithm.*; // ... AbstractChecksum checksum = null;
// updates the checksum with
the content of a file
|
To update the checksum with bytes or bytearrays, you can use the update
methods:
|
// reset the object for reuse (any formatting rules remain) checksum.reset(); // update the checksum with a single byte checksum.update(abyte); // update the checksum with a bytearray checksum.update(bytearray); // update the checksum with the first 10 bytes in the bytearray checksum.update(bytearray, 0, 10); System.out.println(checksum);
|
To get the information what algorithms are supported, use the following
snippet. If you use JSE 5.0 or above, you can use Generics to avoid the
castings.
|
Map map = JacksumAPI.getAvailableAlgorithms(); Iterator iterator = map.entrySet().iterator(); while (iterator.hasNext()) { Map.Entry entry = (Map.Entry)iterator.next(); String description = (String)entry.getValue();
AbstractChecksum checksum =
JacksumAPI.getChecksumInstance((String)entry.getKey());
|
To control the format of the checksum only, you can perform methods
on the checksum object:
|
// checksum is printed in hex form (see also option -x) // example: 7d93370d5ef94450151826ca20c6e512 checksum.setEncoding(HEX); // checksum is printed in uppercase
hex form (see also option -X)
// checksum is printed in uppercase
hex and grouped form (see also options -g, -G)
// checksum is printed in Base
64 form (see also option -E)
// checksum is printed in BubbleBabble
form (see also option -E)
|
To control the format of a complete line, you can use the format method
|
// print the checksum, the default output format depends on the algorithm System.out.println(checksum); // print the checksum, the default
output format depends on the algorithm
// print the checksum value only
(see also option -F)
// print the checksum value with
a customized format (see also option -F)
|
The examples above are expected to help you to take the first barriers.
For detailed information about all possibilities you have with Jacksum,
please have a look in the open source code or generate the javadoc from
it.
What is planned for the next releases?
I still have a lot of ideas and brilliant feature requests from other people on my desk for the Jacksum project. None of those will be forgotten, but it takes time to implement, test, optimize and document them. These are the major requests which will be addressed for next releases (unsorted):
- Identify extra data (files and/or directories) that have been added
to the target location during a comparison operation,
thanks to John D. for the feature request and thanks to Dipl.-Inf.
(FH) Ralf Kahrl for the reference implementation!
- a new API suggestion which could be used by both the CLI and a GUI.
Thanks to Stephan Classen, Sibylle Dürr, Barbara Keller,
Audrey Lim and Judith Rüesch
for working on it as part of their IT-project at the ETH Zürich,
Switzerland
- A Swing GUI for Jacksum (maybe a separate project)
- HMAC support for the algorithms
- Read files from a list
- Distinguish between missing files versus files that are different
also if option -l is used
- CRCs with 1-7 bit length
- Filter for processing particular files only
- Performance support for boxes having multiple CPUs and/or cores
- Filesystem specific file attributes (see also JSR
203)
- New algorithms
If you take information from this website to Wikipedia or any other
place in the web, please be fair and put at least a reference which links
back to this page.
| NAME
Jacksum (JAva ChecKSUM) VERSION
SYNOPSIS
DESCRIPTION
The following parameter is supported: file
a path name of a file to be checked. Wildcards are
The following options are supported: -a algo the
algorithm, default is sha-1
-A
Alternate. By default Jacksum uses algorithms provided by
-c list check
the integrity against a given list. The list is
-d
directories (regular) only. Don't follow symbolic links on
-e seq
expectation. A sequence for the calculation is expected.
-E encoding encoding. The checksum can be encoded:
bin Binary
since Jacksum 1.6.0, see also -x and -X -f
process files only, this option suppresses the messages
-F format format. Set
a customizable output format to overwrite the
#ALGONAME will be replaced by the name
of the
since Jacksum 1.5.0, if not other specified,
-g count group
the hex output for the checksum in "count" bytes for
-G char group
character. Only valid if encoding is hexadecimal
-h [lang] print help,
valid codes for "lang" are "en" or "de", default
-I string ignore. While
creating a list by -m or reading a list by -c,
-l
list. Just list files which were modified or deleted.
-m
print metainfo. Additional lines will be printed. With the
-o file output.
The output of the program goes to a file rather than
-O file output.
Same as -o, however an existing file will be
-p
path. Put the path info on each line, instead of printing
-P char path
char. By default the system-dependent default name
-q [type:]seq process a sequence quickly and
quit the program.
txt:Example1
If type is not set, the seq is expected to be in hex form.
-r
process subdirectory recursively
-s sep
a custom separator string
-S
summary. It calculates just one checksum value. All files,
-t form a
timestamp format. Java's formatter class
G Era designator
If form is set to the word "default", timestamps will be
#SEPARATOR will be replaced by the separator which you
since Jacksum 1.6.0, see also -F -u file ugly,
undesirable, unforeseen, uninvited. Any error messages
-U file ugly,
undesirable, unforeseen, uninvited. Same as -u, however
-v
version. Prints the product version and exits
-V control verbose. Prints
additional information. If -V is the only
details | nodetails Errors with or without
details
If control is set to the word called "default", control is
-w
The file parameter (the last parameter) is intended to be
-x
lowercase hex output for the checksum, it is an alias for
-X
uppercase hex output for the checksum, it is an alias for
The following algorithms are supported: adler32 algorithm:
Adler32 [java.util.zip.Adler32]
bsd
algorithm: BSD checksum algorithm
cksum
algorithm: POSIX 1003.2 CRC algorithm
crc:<params> algorithm:
CRC
crc8
algorithm: CRC-8
crc16
algorithm: CRC-16 (ARC)
crc16_x25 algorithm:
CRC-16 (Frame Checking Sequence)
crc24
algorithm: CRC-24
crc32
algorithm: CRC-32 [java.util.zip.CRC32]
crc32_bzip2 algorithm:
CRC-32 (Bzip2)
crc32_mpeg2 algorithm:
CRC-32 (MPEG-2)
crc64
algorithm: CRC-64
elf
algorithm: ELF
ed2k
algorithm: eMule/eDonkey
gost
algorithm: GOST R 34.11-94
has160
algoritm: HAS-160 [gnu.crypto.hash.Has160 (jonelo)]
haval
algorithm: Haval [gnu.crypto.hash.Haval]
md2
algorithm: MD2 [gnu.crypto.hash.MD2]
md4
algorithm: MD4 [gnu.crypto.hash.MD4]
md5
algorithm: MD5 [java.security.MessageDigest]
none
algorithm: none
read
algorithm: read
rmd128
algorithm: RIPEMD-128 [gnu.crypto.hash.RipeMD128]
rmd160
algorithm: RIPEMD-160 [gnu.crypto.hash.RipeMD160]
rmd256
algorithm: RIPEMD-256 [org.bouncycastle.crypto.digests]
rmd320
algorithm: RIPEMD-320 [org.bouncycastle.crypto.digests]
sha0
algorithm: SHA-0 [gnu.crypto.hash.Sha0 (jonelo)]
sha
algorithm: SHA-1 [java.security.MessageDigest]
sha224
algorithm: SHA-224 [gnu.crypto.hash.Sha224 (jonelo)]
sha256
algorithm: SHA-256 [java.security.MessageDigest]
sha384
algorithm: SHA-384 [java.security.MessageDigest]
sha512
algorithm: SHA-512 [java.security.MessageDigest]
sum8
algorithm: Sum 8
sum16
algorithm: Sum 16
sum24
algorithm: Sum 24
sum32
algorithm: Sum 32
sysv
algorithm: UNIX System V checksum algorithm
tiger128 algorithm:
Tiger 128 [gnu.crypto.hash.Tiger160 (by jonelo)]
tiger160 algorithm:
Tiger 160 [gnu.crypto.hash.Tiger160 (by jonelo)]
tiger
algorithm: Tiger [gnu.crypto.hash.Tiger]
tiger2
algorithm: Tiger2 [gnu.crypto.hash.Tiger2 (jonelo)]
tree:<algo> algorithm:
Hash Tree
whirlpool0 algorithm:
Whirlpool-0 [gnu.crypto.hash.Whirlpool (jonelo)]
whirlpool1 algorithm:
Whirlpool-1 [gnu.crypto.hash.Whirlpool]
whirlpool algorithm:
Whirlpool [gnu.crypto.hash.Whirlpool (jonelo)]
xor8
algorithm: Exclusive-Or
The output format of Jacksum:
If you don't specify a customized format with option -F,
checksum is a checksum, CRC or a fingerprint; output
EXIT STATUS
EXAMPLES
jacksum -a crc32 -q 48656C6C6F20576F726C6421
jacksum -a crc32 -x *.txt
jacksum -a crc32 -f -t default .
jacksum -f -a crc:16,1021,FFFF,false,false,0
.
jacksum -a haval_256_5 .
jacksum -a sha1 -s "\t" -t "EEE, MMM d, yyyy
'at' h:mm a" .
jacksum -a cksum -r /mnt/share
jacksum -a md5 -f -r -m -o list.jacksum \data
jacksum -a md5 -f -r -m -o list.jacksum -w \data
jacksum -c list.jacksum
jacksum -a md5 -f -F "#FINGERPRINT #FILESIZE
#FILENAME" *
jacksum -a md5 -A -V summary bigfile.iso
jacksum -a crc32 -X -f -p -r -F "#FILENAME #CHECKSUM"
-o list.sfv *
jacksum -a ed2k -f -F
jacksum -a ed2k -f -P / -F "<a href=#QUOTEed2k://|file
jacksum -a tree:tiger -F "urn:#ALGONAME:#FINGERPRINT"
-q hex:
jacksum -a sha1+crc32 .
jacksum -a sha1+crc32 -F "#CHECKSUM{0} #CHECKSUM{1}
#FILENAME" .
jacksum -a all -F "#ALGONAME{i} (#FILENAME) =
#CHECKSUM{i}" .
jacksum -a all -F "#ALGONAME{i}" -q txt:
jacksum -h synopsis
jacksum -h haval
jacksum -h -t
jacksum -h en | more
AUTHOR
LICENSE
This program is distributed in the hope that
it will be useful,
You should have received a copy of the GNU General
Public License
|
History:
Jacksum 1.7.0, July 30, 2006
- added a customizable CRC algorithm, now you can calculate any CRC
which
can be described by the Rocksoft Model CRC Algorithm (8 to 64
bit width),
see also sf# 1518023 Setting of an initial value for a CRC
- support for combinable checksums, see also sf# 1210489
(multiple hashes at the same time), thanks to synonymous2 for
this feature request
- support for using all algorithms at once (-a all)
- two new algorithms are supported: crc32_bzip2, HAS-160
- support for Tiger Tree hashes (aka Merkle Hashes). Thanks to Carsten
Krüger,
Germany for the feature request and pointers to some resources
- support for new encodings (bin, dec, oct)
- support for the combination of both options -c and -w,
Thanks to Dipl.-Inf. (FH) Ralf Kahrl, Germany for the implementation
of this feature
- a small performance improvement for the whirlpool algorithms
- replaced the crc24 with a faster one by using the customizable CRC
algorithm
(the old one had also a minor bug in the parameterless constructor)
- bug fixed: -V summary does not always return reasonable values
- bug fixed: update(byte[], int, int) fails if offset is > 0 (sf #
1525183)
This can cause problems if Jacksum is incorporated in different
projects
- The bouncycastle and gnu classes have been moved to jonelo.jacksum.adapt
so that
they won't clash with different downloaded versions of the classes.
Actually this
is to avoid potential problems if a project uses both bouncycastle
and Jacksum for example.
Thanks to Alberto Rodriguez, Spain for the feature request
- documentation updated (BeOS' data integrity programs, Tru64 and year
of the invention for
many algorithms)
- tested with gij 4.0.2, JRE 1.3.1_18, 1.4.2_12, 5.0_07, 6.0-rc-b93
Jacksum 1.6.1, Nov 13, 2005
- regression bug fixed: -r does not work anymore on Linux/Unix
Thanks to Christoph R., Germany and niku.u for the bug reports
(sf# 1354426)
- bug fixed: stdout and stderr overwrite each other when stdout and
stderr are equal
- bug fixed: -c and -V summary give meaningless summary
- exit status depends on the result of -c now
Thanks to Martin Z., Germany for the feature request
- improved documentation ("exit status" and "see also" have been added)
Jacksum 1.6.0, Sep 3, 2005
- twelve new algorithms are supported: CRC-8, CRC-24, GOST R 34.11-94,
SHA-0, SHA-224,
Tiger-128, Tiger-160, Tiger2, Whirlpool-0, Whirlpool-2, RIPEMD-256,
RIPEMD-320
- change: "whirlpool" refers to Whirlpool-2 now, rather than to Whirlpool-1
- support for an alternate Adler 32 implementation
- improved option -c: Jacksum can check the integrity even if a file
list has
not been created by Jacksum (or a file list without meta information)
Thanks to Sebastian J., Germany for this feature request
- new option -w for setting the working directory
- new algorithm-code called "none" for ignoring the real content of
the files for being able to check just against the filesize
- new algorithm-code called "read" for being able to read the file's
content,
but without doing any calculation
- new option -E for an encoding of the checksum (hex, hexup, Base 16,
Base 32,
Base 64 and BubbleBabble are supported)
- new option -g (group some bytes) for better readability of a hex
checksum
- new option -G (group separator) for better readability of a hex checksum
- new option -o for redirecting the output to a file rather than the
standard output,
in this case the file is also excluded from the calculation
process
- new option -O for overwriting an existing file
- new option -I for ignoring lines when checking the integrity by -c
- new option -V for a verbose output (number of processed files and
dirs, processed bytes,
number of read errors and elapsed time)
- improved option -e: works also for multiple files and directories
for being able to find duplicates
- improved option -e: when using -e, the option -x is not necessary
anymore,
if the return value by default is hex anyway
- improved option -m: unnecessary defaults are not be written to the
header anymore
- improved option -h: can show only fractions of the help file rather
than
the complete help file
- improved option -t: #SEPARATOR and #QUOTE are also replaced
Thanks to Claudio C., Italy for the feature request
- improved option -F: #FILENAME{NAME} and #FILENAME{PATH} can be used
Thanks to Claudio C., Italy for the feature request
- bug fixed: if calling the getHexValue() method more than once, the
hash based
algorithms return a different value; this can cause problems
if Jacksum
is used in other projects, Thanks to Bob C. for the bug report
- bug fixed: problem on Unix/Linux while checking a file list if the
filename's
last character is a colon (e. g. "Terminal 1:")
- improved documentation, added also collision files
- improved the public API (support a method to return byte[])
Thanks to Alex G., Germany for this feature request
- improved the public API for other projects (methods getAvailableAlgorithms(),
and equals() have been added)
- Added javadoc, Thanks to Corey Osman for this feature request
- refactored and code improvements
- tested with gij 3.2.2, Kaffe 1.1.4, JRE 1.3.1_16, 1.4.2_09, 5.0_04,
6.0-ea-b48
Jacksum 1.5.1, 2004-10-31
- regression bug fixed: when using option -l, removed files will not
be printed out to the standard output anymore
Thanks to Sabrina Rolleman, Canada for the bugreport
- sourceforge feature request #1028824 has been implemented (add homepage
URI with -m)
Thanks to Lee A. Davis for the feature request
- improved documentation
- successfully tested with JRE 5.0
Jacksum 1.5.0, 2004-08-22
- four new algorithms are supported: ed2k/eDonkey/eMule, CRC-64, ELF-32,
FCS-16
Thanks to Henrique Malheiro, Portugal for the eDonkey reference
implementation
- sourceforge bug #948070 has been fixed (-c won't work if -t has been
set)
Thanks to Lee A. Davis for the bugreport
- bug fixed: Jacksum hangs if it reaches a fifo under Unix/Linux
- bug fixed: files which are used by another process can't be processed
properly
- new option -d for ignoring symbolic links to directories under Unix/Linux
to avoid
enless loops in particular cases
- improved option -q to support not only hex, but also text and decimal
formats
- new option -F for being able to customize the output format
see also sourceforge feature request #968469 (show file length
on MD5)
- new option -P to print out filenames with a customized separator
- lists created with -m are platform independent now, you can verify
files against
a list on Linux/Unix if the list has been created on Windows
for example
- new option -S to calculate just one fingerprint (summary)
Thanks to Berthold Kohlmann, Germany for this feature request
- sourceforege feature request #968491 has been implemented
(Handle pre 1.5 time formats with -c), thanks to Lee A. Davis
for the request
- sourceforge feature request #968487 has been implemented (list dir
argument as comment)
Thanks to Lee A. Davis for the feature request
- new option -A to specify alternate implementations of one of the
following algorithms
crc32, md5, sha-1, sha-256, sha-384, sha-512
- added alias called FCS-32 for CRC-32
- added alias called SHA-160 for SHA-1
- Java version check also for IBM's Java VM
- tested successfully with JRE 1.5 beta3
Jacksum 1.4.0, 2004-02-01
- three new algorithms are supported: Tiger, Haval and the MPEG spec
of CRC-32
Thanks to Chris Ash, Southampton, UK for suggesting this feature
based
on existing GPL code (VideoLan project)
- Haval can have both length (128, 160, 192, 224 or 256 bits) and round
parameters (3 to 5)
- algorithms sha-256, sha-384 and sha-512 are also supported with JRE
1.3.1 now
- new option -p for including path info on each line when recursively
file processing is requested, this makes it easier to sort or
grep ouput lines
Thanks to Douglas E. W. for both feature request and reference
implementation
- new option -e for comparison against an expected checksum
Thanks to Daniel Ellermann, Germany for both feature request
and reference implementation
- new option -l to show a list of modified or deleted files, list can
be used to feed the zip command
- exits, if parameter -t does not contain supported characters
- version check for checkfiles introduced for better compatibility
- improved comments for sourcecode called Crc16.java
- documentation updated with Mac OS X information
- requires at least JRE 1.3.1, 1.4.2 is recommended
Jacksum 1.3.0, 2003-11-02
- eight new algorithms are supported: sha-256, sha-384 and sha-512
(requires Java 1.4.2 or later),
xor8, sum8, sum16, sum24 and sum32
- option to check files against a given list (option -c)
Thanks to Leonardo A. Pires, Brazil for this feature request
Thanks a lot to Christian F., London, UK for his reference implementation
- option to create meta-information (option -m); while checking against
a list, you don't have to enter
the original command line options again
- timestamps of files can be part of the output (option -t)
Thanks to Vishwanathan Narayanan, Florida, USA for this feature
request
with the option -c you can check against both content and timestamps
- the output format of timestamps is highly configurable
- process a hex sequence quickly (option -q)
Thanks to Jack Memishian, USA for this feature request
- bug fixed: algorithm cksum hangs, if a file is greater than 2 GB
- bug fixed: processing special file system folders, like Windows'
"System Volume Information"
throws to a NullPointerException
- stdout and stderr are separete streams now
- Jacksum is using the GNU crypto package 1.1 (http://www.gnu.org/software/gnu-crypto/)
- documentation updated
Jacksum 1.2.0, 2003-02-16
- four new algorithms from the GNU crypto project are supported:
MD4, RIPEMD-128, RIPEMD-160 and Whirlpool (http://www.gnu.org/software/classpathx/crypto)
- bug fixed: calling the getValue() method more than once for the Cksum
class returns a different value; this can cause problems if
Jacksum will be used in other projects.
Thanks to Cary Coulter for both, bug report and fix.
- bug fixed: CRC16 does not work like the standard CRC16 generator
poly X^16 + X^15 + X^2 + 1.
Thanks to David Elfi, Argentina for both bug report and fix
- provided compatibility with free Kaffe Java VM (Java version check
only for Sun's Java VM)
- option -v to get the version of Jacksum
Jacksum 1.1.2, 2003-01-19
- bug fixed: input file will not be closed: this can cause problems
if Jacksum will be used in other projects.
Thanks to Bill Kelemen for both, bug report and fix.
- faster algorithm for output of checksums in hex format
- documentation updated (Solaris 9+ has a md5 application)
Jacksum 1.1.1, 2002-11-07
- bug fixed: algorithm sysv returns invalid checksum if files are greater
than ~9 MB. Thanks to Sunny Liu, NYC for both bug report and
fix.
Jacksum 1.1.0, 2002-09-08
- options for hexadecimal checksum output (lower- and uppercase)
Thanks to Peter Frey, Germany for this feature request
- filenames/directories will be sorted alphabetically
Jacksum 1.0.0, 2002-07-07
- initial release
- requires at least JRE 1.3.0
- eight algorithms Adler32, BSD sum, POSIX cksum, CRC-16, CRC-32, MD2,
MD5,
SHA1 and Unix System V sum are supported
- processing of subdirectories is supported
- a custom separator string can be defined
Keep updated - the announcement-mail-alias:
Are you interested in hearing the latest from Jacksum? If so, it is
easy to stay informed. Just subscribe to the announcement alias. It's just
only me who can post messages to the list. Expect a maximum of 12 email
per year.
To subscribe to the list, send a message to: announce-subscribe@jacksum.dev.java.net
To remove your address from the list, send a message to:
announce-unsubscribe@jacksum.dev.java.net
View the announcements list archive: https://jacksum.dev.java.net/servlets/SummarizeList?listName=announce
Discuss with other users - the user-mail-alias:
If you have something for the wish list or if you have troulbe with
Jacksum, write to this mailing list. The mailing list is a good place to
discuss new ideas, features and bugs.
To subscribe to the list, send a message to: users-subscribe@jacksum.dev.java.net
To remove your address from the list, send a message to:
users-unsubscribe@jacksum.dev.java.net
To write to the list, send a message to: users@jacksum.dev.java.net
Trackers (Bug database, Support and Feature requests):
http://sourceforge.net/projects/jacksum
Private eMail:
Just drop me an email. Please
be patient if you don't receive an eMail on the same day, because I take
some time for each request.
-
- http://www.jonelo.de (en)
- http://www.jonelo.de (de)
- http://directory.fsf.org/jacksum.html
- http://dmoz.org
- http://freshmeat.net/projects/jacksum
- https://savannah.nongnu.org/projects/jacksum/
- http://www.honeypots.net/ids/integrity-management
- http://www.freeware.de
- http://www.freeware-archiv.de
- http://www.freewarepage.de
- http://www.gnu.org
- http://www.heise.de/ct
- http://www.shareware.de
Copyright © 2000-2010 Dipl.-Inf. (FH) Johann N. Löfflmann
jonelo@jonelo.de,last update of this page: 18-Jul-2010