Collision: Linux App to Verify ISO and Other Files

4 min


The tutorial outlines the features and usage guide of Collision. It is a GUI-based, easy-to-use utility that lets you verify files using cryptographic hash functions.

Why do you need to verify files?

Everyone downloads files every day over the internet. But many users never bother to verify their integrity or authenticity. That means whether the file is legitimate and not tampered with by any malicious codes.

Take an example of any Linux Distributions‘ ISO files which come as standard installer images. All popular distribution makers also provide a hash file alongside the ISO file. Using that file, you can easily compare the hash value of your downloaded file. And you can rest assured that your file is correct and not corrupted by any means.

Moreover, if you download a large file over an unstable internet connection, the file may get corrupted. IN those scenarios also, it helps to verify.

Collision – Features and How to Use

The app – Collision uses Cryptographic Hash Functions to help you verify files. The cryptographic hash functions are popular algorithms that generate the file data into a fixed-length data stream via several encryption algorithms. The most popular ones are MD5, SHA-1, SHA-256 and SHA-512. All of these are supported by the Collision app.

In addition to that, Collision also presents a neat user interface which is simple and easy to use for every Linux user. Here’s how it looks.

Collision - First Screen
Collision – First Screen

Firstly, it has two primary features. a) upload a file to get the checksum or hash values and b) compare the checksum with the uploaded file.

For example, if you have a simple file, you can upload it via the “Open a File” button or “Open” for re-uploading another file.

As you can see in the below image, the text file has the below checksum for various hash functions. Now you can share the file over the internet/with anyone, along with the checksum values for verification.

Hash values of a test file
Hash values of a test file

Moreover, if someone tampers with the file (even with a single byte) or the file gets corrupted during distribution, then the hash value changes entirely.

Secondly, if you want to verify the integrity of a file you have downloaded, go to the Verify tab. Then upload the file and enter the hash value of the uploaded file you received.

If it matches, you should see a green tick showing its authenticity.

Collision verifies a sample file with SHA-256
Collision verifies a sample file with SHA-256

In addition, here is another example where I have modified the test file and kept the values as same. This use case clearly states that it’s not valid for this file.

verify files using Collision
Collision showing that a file is not valid

An important note

It is worth mentioning here that the hash methods don’t verify the file meta attributes such as modify time, modify date, etc. If someone tampers any file and reverts it to its original content, the hash methods would term it a valid file.

Now, let’s see a typical example of validating an ISO file.

Example of Using Collision to verify a sample ISO file of Ubuntu Linux

I am sure you download many ISO files while using Linux in general. So to illustrate, I have downloaded the popular Ubuntu ISO server image from the official Ubuntu download page.

Ubuntu server ISO file and checksums
Ubuntu server ISO file and checksums

The SHA256SUMS file has the below checksum value for the installer, as shown above.

SHA-256 value of Ubuntu server ISO image
SHA-256 value of Ubuntu server ISO image

After you download, open the Collision application and upload the ISO file via the Verify tab. Then copy the SHA-256 value and paste it to the checksum box on the left.

You should see that the file is authentic if you have correctly downloaded and followed the steps.

Ubuntu server ISO image verified
Ubuntu server ISO image verified

How to Install Collision

The Collision app installation is effortless using Flatpak. You need to set up Flatpak for your Linux Distributions and click on the below link to install Collision.

After installation, you should find it via the application menu of your distro.

Is there another way to verify files without any app?

Yes, there are some built-in utilities available in all Linux distributions, which you can also use to verify the files and their integrity using the terminal.

The following terminal utilities can be used to determine the hash of any file. They are installed by default in all distros, and you can even use them for your shell script to automate.

md5sum <file name>
sha1sum <file name>
sha256sum <file name>

Using the above utilities, you can find out the hash value. But you need to compare them to verify manually.

Verify files via command line utilities
Verify files via command-line utilities

Closing Notes

I hope this guide helps you verify your files using the Collision GTK app. It is straightforward to use. Moreover, you can use the command line methods to verify any files you want when you are in the terminal. Also, it’s a best practice to always check for file integrity wherever possible.


We bring the latest tech, software news and stuff that matters. Stay in touch via Telegram, Twitter, YouTube, and Facebook and never miss an update!

Join our Telegram channel and stay informed on the move.

Subscribe to Blog via Email

Enter your email address to subscribe to this blog and receive notifications of new posts by email.


Arindam

Creator of debugpoint.com. All time Linux user and open-source supporter. Connect with me via Telegram, Twitter, LinkedIn, or send us an email.
Subscribe
Notify of
guest

This site uses Akismet to reduce spam. Learn how your comment data is processed.

0 Comments
Inline Feedbacks
View all comments
0
Would love your thoughts, please comment.x
()
x