Grinnode-live / 2020-grin-bug-bash-challenge

Finding bugs in Grin-Wallet & Grin-nodes for a bounty prior to Grin fork v5.
3 stars 1 forks source link

[GRIN-Node] check downloaded checksum hash value #23

Closed MCM-Mike closed 3 years ago

MCM-Mike commented 3 years ago

Description Download GRIN-Node and compare the downloaded archive checksum, against the given hash values (sha256).

Prerequisites Download https://github.com/mimblewimble/grin/releases/latest and check if the checksum hash values are correct.

Expected result: They should match.

chandrashekar10 commented 3 years ago

Description Download GRIN-Node and compare the downloaded archive checksum, against the given hash values (sha256).

I downloaded the latest version of grin

https://github.com/mimblewimble/grin/releases/tag/v4.1.1

and ran the following command

  Chandrashekars-MacBook-Air:Downloads chandrashekar$ shasum -a 256 grin-v4.1.1-macos.tar.gz 
  cb5f0fd524f8d3116c5ebeca2d8e901fe7dd2be2b9604c425a5b8aa9255236c7  grin-v4.1.1-macos.tar.gz

The Checksum value obtained is

      cb5f0fd524f8d3116c5ebeca2d8e901fe7dd2be2b9604c425a5b8aa9255236c7                        --(1)

This matches with the Checksum value in the file

          grin-v4.1.1-macos-sha256sum.txt

which is downloaded and opened using vi editor

Screen Shot 2020-12-20 at 5 42 37 PM

From this we can see

   SHA256(/Users/runner/work/1/a/grin-v4.1.1-macos.tar.gz)=
   cb5f0fd524f8d3116c5ebeca2d8e901fe7dd2be2b9604c425a5b8aa9255236c7

and the check sum is

   cb5f0fd524f8d3116c5ebeca2d8e901fe7dd2be2b9604c425a5b8aa9255236c7                     --(2)

Comparing (1) and (2) we can find that the checksums are equal and they match

marekyggdrasil commented 3 years ago

Excellent! Thank you!