Checksum

Checksum
A checksum or hash sum is a fixed-size datum computed from an arbitrary block of digital data for the purpose of detecting accidental errors that may have been introduced during its transmission or storage. The integrity of the data can be checked at any later time by recomputing the checksum and comparing it with the stored one. If the checksums match, the data was likely not accidentally altered. The procedure that yields the checksum from the data is called a checksum function or checksum algorithm. A good checksum algorithm will yield a different result with high probability when the data is accidentally corrupted; if the checksums match, the data has the same high probability of being free of accidental errors.

Effect of a typical checksum function (the Unix cksum utility)

Checksum functions are related to hash functions, fingerprints, randomization functions, and cryptographic hash functions. However, each of those concepts has different applications and therefore different design goals. It is important to not use a checksum in a security related application, as a checksum does not have the properties required to protect data from intentional tampering. Check digits and parity bits are special cases of checksums, appropriate for small blocks of data (such as Social Security numbers, bank account numbers, computer words, single bytes, etc.). Some error-correcting codes are based on special checksums that not only detect common errors but also allow the original data to be recovered in certain cases.

Checksum algorithms
Parity byte or parity word
The simplest checksum algorithm is the so-called longitudinal parity check, which breaks the data into "words" with a fixed number n of bits, and then computes the exclusive or of all those words. The result is appended to the message as an extra word. To check the integrity of a message, the receiver computes the exclusive or of all its words, including the checksum; if the result is not a word with n zeros, the receiver knows that a transmission error occurred. With this checksum, any transmission error that flips a single bit of the message, or an odd number of bits, will be detected as an incorrect checksum. However, an error that affects two bits will not be detected if those bits lie at the same position in two distinct words. If the affected bits are independently chosen at random, the probability of a two-bit error being undetected is 1/n.

Checksum

Modular sum
A variant of the previous algorithm is to add all the "words" as unsigned binary numbers, discarding any overflow bits, and append the two's complement of the total as the checksum. To validate a message, the receiver adds all the words in the same manner, including the checksum; if the result is not a word full of zeros, an error must have occurred. This variant too detects any single-bit error, but the probability that a two-bit error will go undetected is a little less than 1/n. This addition-based modular sum is used in SAE J1708.[1]

Position-dependent checksums
The simple checksums described above fail to detect some common errors that affect many bits at once, such as changing the order of data words, or inserting or deleting words with all bits set to zero. The checksum algorithms that are most used in practice, such as Fletcher's checksum, Adler-32, and cyclic redundancy checks (CRCs), address these weaknesses by considering not only the value of each word but also its position in the sequence. This feature generally increases the cost of computing the checksum.

General considerations
A single-bit transmission error then corresponds to a displacement from a valid corner (the correct message and checksum) to one of the m adjacent corners. An error that affects k bits moves the message to a corner that is k steps removed from its correct corner. The goal of a good checksum algorithm is to spread the valid corners as far from each other as possible, so as to increase the likelihood that "typical" transmission errors will end up in an invalid corner.

Checksum tools
Advanced Hash Calculator [2], hash calculator software for multiple files for Windows that calculates CRC-32, MD2, MD4, MD5, SHA-1, SHA-256, SHA-384 and SHA-512 checksums. Bitser, a free Microsoft Windows application that calculates MD5, SHA-1 and SHA-256 sums for any given input file. checksum [3], a fast file, folder and drive hashing application for Windows. cksum, a Unix command that generates both a 32-bit CRC and a byte count for any given input file. Cobynsoft's Hash Calculator [4], a free multi-file hash calculator for Windows that calculates MD5, SHA-1, SHA-256 and SHA-512 checksums. File Checksum Tool [5], GUI tool that generates and compares MD5, SHA-1 and SHA-256 checksums. File Checksum Integrity Verifier (FCIV) [6], a command-prompt utility from Microsoft that computes and verifies MD5 or SHA-1 cryptographic hash values of files. Jacksum [7], a Java API, usable both through a GUI and a CLI, which incorporates many checksum implementations and allows to extend with as many as you need. RHash [8], an open-source CLI tool and C library which incorporates a large number of checksum implementations. jdigest [9], a Java GUI tool that generates and checks MD5 and SHA sums jcksum [10], a Java library, that can be used by developers in Java applications to calculate checksums using different algorithms. md5sum, a Unix command that generates an MD5 sum Parchive, a crossplatform software that is capable of both verifying checksums and repairing errors when found. sum, a Unix command (also ported to Win32) that generates order-independent sums; uses two different algorithms for calculating, the SYSV checksum algorithm and the BSD checksum (default) algorithm.

Checksum

References
[1] "SAE J1708" (http:/ / www. kvaser. com/ zh/ about-can/ related-protocols-and-standards/ 50. html). Kvaser.com. . Retrieved 2012-08-13. [2] http:/ / www. ashkonsoftware. com/ hashcalc. html [3] http:/ / corz. org/ windows/ software/ checksum [4] http:/ / www. cobynsoft. com/ cobynsoft_hashcalculator. html [5] http:/ / www. filechecksum. com/ [6] http:/ / support. microsoft. com/ kb/ 841290 [7] http:/ / www. jonelo. de/ java/ jacksum/ index. html [8] http:/ / rhash. anz. ru/ [9] http:/ / code. google. com/ p/ jdigest/ [10] http:/ / code. google. com/ p/ jcksum/

External links
Additive Checksums (C) (http://www.netrino.com/Embedded-Systems/How-To/Additive-Checksums) iEncode Tool (http://securityfocus.eu/?page_id=949)

Article Sources and Contributors

Article Sources and Contributors

Checksum Source: http://en.wikipedia.org/w/index.php?oldid=529323540 Contributors: Abdull, Agarlock, Alansohn, Aldie, Alex43223, Angrytoast, Arvindn, Avihu, BNSDRX09, Badly Bradley, Badon, Bentogoa, Billybobbilly4325, Boothy443, CD-Host, CanisRufus, Centic, Chexum, Ciphergoth, Conversion script, Cuddlyable3, Cybjit, Damian Yerrick, DanielPharos, Davemckenna01, Dicklyon, Diddi, Drugonot, Dysprosia, DRahier, Efindlay, Eloy, Entropicorder, EskilA, FitzColinGerald, Frap, Frappucino, Fredrik, Freewol, Furrykef, Gdassieu, Gdr, GentlemanGhost, Giftlite, Gmarie42, Gregb, Ham Pastrami, Hydrargyrum, Iamthedeus, InverseHypercube, JeffreyBKing, Jhodapp1, Jim1138, Joel Saks, Jonelo, Jorge Stolfi, KLLvr283, Karnesky, Ksempac, Lacrimosus, Linas, Lowellian, MER-C, Matt Crypto, Melchoir, MementoVivere, Mh, Mindstalk, Mintleaf, Mitch Ames, Mormegil, Mukkakukaku, Nageh, Nakon, Navicular, Nealmcb, Need4steer, Neelix, Newarrior, Newell311, Oleg Alexandrov, Ozden, Panjunfeng, Peterjam70, Popescucalin, Rick Burns, Rjwilmsi, Robofish, Runxctry, Salgueiro, Samw, Sedimin, Sg227, Shamino, ShaunMacPherson, Simon Shek, Spiritllama, Stalfur, Sterrys, Takanoha, Target drone, Taw, The Anome, Tobias Hoevekamp, TomViza, Traxs7, Vonvon, Vrenator, W96, Wadlooper, Wayiran, WikHead, Wolfch, Ykhwong, Zoobiewa, 176 anonymous edits

Image Sources, Licenses and Contributors

Image:Checksum.svg Source: http://en.wikipedia.org/w/index.php?title=File:Checksum.svg License: Public Domain Contributors: Original by Helix84, adapted by Jorge Stolfi

License
Creative Commons Attribution-Share Alike 3.0 Unported //creativecommons.org/licenses/by-sa/3.0/