meta-llama / llama

Inference code for Llama models
Other
54.12k stars 9.32k forks source link

Providing SHA-256 hashes #1122

Open vargar2 opened 1 month ago

vargar2 commented 1 month ago

Overview:

As a future user of the Llama 2 model, I find the MD5 hash provided for downloads very helpful for verifying file integrity. However, in light of increasing security concerns and the weaknesses of MD5 for cryptographic purposes, I would like to propose the addition of SHA-256 hashes alongside the existing MD5 hashes.

Benefits:

Enhanced Security: SHA-256 is considered more secure than MD5 and is less prone to collision attacks. Compliance: Many users and organizations now require or prefer SHA-256 hashes for verification purposes due to its cryptographic strength. Future-Proofing: While MD5 remains useful, its weaknesses are increasingly being exploited, making it prudent to offer a more robust alternative.

Proposal:

I suggest publishing SHA-256 hashes and checking them as part of the download script, alongside the existing MD5 hashes. This would provide users with an additional option for verifying file integrity, catering to a broader range of security preferences.