Originally posted by: QuixoticOne
Straight from MS's own site, I just personally verified the following facts concerning their updates
to help you all see if your discs may have been uh damaged by a scratch or anything else;
like I said, it matches what I've seen elsewhere too, and the SHA1 is a completely trustworthy way of verifying file integrity as long as you compute it locally on your file with a SHA1 utility.
So make the disc yourself, or have your favorite "IT subcontractor" somewhere make it for you, no difference if the hash is good.
en_windows_vista_with_service_pack_1_x64_dvd_x14-29595.iso ISO-9660 DVD Image
File Size 3749 MB
SHA-1 Hash bdadc46a263a7bf67eb38609770e4fdbd05247cb
Description This file contains the following:
Windows Vista? Business with Service Pack 1
Windows Vista? Home Basic with Service Pack 1
Windows Vista? Home Premium with Service Pack 1
Windows Vista? Ultimate with Service Pack 1
Windows Vista with Service Pack 1 (x86) - DVD (English)
File en_windows_vista_with_service_pack_1_x86_dvd_x14-29594.iso ISO-9660 DVD Image
File Size 2943 MB
SHA-1 Hash bcd715a02739809e477c726ae4b5caa914156429
Description This file contains the following:
Windows Vista? Business with Service Pack 1
Windows Vista? Business N with Service Pack 1
Windows Vista? Home Basic with Service Pack 1
Windows Vista? Home Basic N with Service Pack 1
Windows Vista? Home Premium with Service Pack 1
Windows Vista? Ultimate with Service Pack 1
FYI:
http://en.wikipedia.org/wiki/Sha1
SHA-1, SHA-224, SHA-256, SHA-384, and SHA-512 are the secure hash algorithms required by law for use in certain U. S. Government applications, including use within other cryptographic algorithms and protocols, for the protection of sensitive unclassified information. FIPS PUB 180-1 also encouraged adoption and use of SHA-1 by private and commercial organizations.
A prime motivation for the publication of the Secure Hash Algorithm was the Digital Signature Standard, in which it is incorporated.
...
To find an actual collision [for even a single file/hash], however, a massive distributed computing effort or very large parallel supercomputer such as those possessed by the NSA would be required.
Here's the facts about a SHA1 calculating utility from MS:
http://support.microsoft.com/kb/841290
http://download.microsoft.com/...s-kb841290-x86-enu.exe
Warning The Microsoft File Checksum Integrity Verifier (FCIV) utility is an unsupported command-line utility that computes MD5 or SHA1 cryptographic hashes for files. Microsoft does not provide support for this utility. Use this utility at your own risk. Microsoft Product Support Services (PSS) cannot answer questions about the File Checksum Integrity Verifier utility.
The File Checksum Integrity Verifier (FCIV) utility can generate MD5 or SHA-1 hash values for files to compare the values against a known good value. FCIV can compare hash values to make sure that the files have not been changed.
With the FCIV utility, you can also compute hashes of all your critical files and save the values in an XML file database. If you suspect that your computer may have been compromised, and important files have been changed, you can run a verification of the file system files against the XML database to determine which files have been modified.
The FCIV utility runs on Microsoft Windows 2000, Windows XP, and Windows Server 2003.