Linux hash Command with Practical Examples

Introduction

In this lab, we will explore the Linux hash command, which is used to calculate cryptographic hash values of files and directories. This command is a powerful tool for verifying the integrity of data and performing other security-related tasks. We will start by introducing the hash command, then learn how to calculate hashes of files and directories, and finally, how to use the hash command to verify file integrity. The hash command is part of the GNU coreutils package, which is a collection of essential command-line tools for the Linux operating system.

Linux Commands Cheat Sheet

Skills Graph

Introduction to the Linux hash Command

In this step, we will learn about the hash command in Linux, which is used to calculate cryptographic hash values of files and directories. The hash command is a powerful tool for verifying the integrity of data, as well as for other security-related tasks.

To get started, let's first check the version of the hash command installed on our system:

hash --version

Example output:

GNU coreutils 8.32
Copyright (C) 2020 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <https://gnu.org/licenses/gpl.html>.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Written by Torbjörn Granlund and Richard M. Stallman.

The hash command is part of the GNU coreutils package, which is a collection of essential command-line tools for the Linux operating system.

Next, let's explore some basic usage of the hash command:

hash -h

This will display the help information for the hash command, which shows the various options and usage examples.

Some of the most commonly used options for the hash command include:

• -a or --algorithm: Specifies the hashing algorithm to use (e.g., md5, sha1, sha256, sha512)
• -c or --check: Verifies the hash values of files against a provided checksum file
• -t or --type: Specifies the type of hash (e.g., md5, sha1, sha256, sha512)

In the following steps, we'll dive deeper into how to use the hash command to calculate hashes and verify file integrity.

Calculating Hashes of Files and Directories

In this step, we will learn how to use the hash command to calculate cryptographic hash values for files and directories.

First, let's create a sample file that we can use for hashing:

echo "This is a sample file." > sample.txt

Now, we can calculate the hash value for this file using the hash command:

hash -t sha256 sample.txt

Example output:

sha256 (sample.txt) = 5d10c2c4d3dc5711938f617416b2b523c4d4f3ecd85a13d7c0c6f88a45b6ebc

The hash command has calculated the SHA-256 hash value for the sample.txt file.

You can also calculate hashes for directories. Let's create a sample directory and some files inside it:

mkdir sample_dir
touch sample_dir/file1.txt sample_dir/file2.txt sample_dir/file3.txt

Now, we can calculate the hash value for the entire directory:

hash -t sha256 sample_dir/

Example output:

sha256 (sample_dir/) = 6d5f807e23db210bc254a28be2abb02f48cf35f4c8d486276e2d56cbf0d3cd36

The hash command has calculated the SHA-256 hash value for the sample_dir directory, including all the files inside it.

You can use different hash algorithms by specifying the -a or --algorithm option, such as md5, sha1, sha256, or sha512.

hash -a md5 sample.txt
hash -a sha1 sample.txt
hash -a sha512 sample.txt

The calculated hash values can be used to verify the integrity of files, which we'll explore in the next step.

Verifying File Integrity Using hash

In this final step, we will learn how to use the hash command to verify the integrity of files by comparing their calculated hash values against known, trusted hash values.

Let's start by creating a checksum file that contains the expected hash values for our sample files:

cat << EOF > sample_checksums.txt
5d10c2c4d3dc5711938f617416b2b523c4d4f3ecd85a13d7c0c6f88a45b6ebc  sample.txt
6d5f807e23db210bc254a28be2abb02f48cf35f4c8d486276e2d56cbf0d3cd36  sample_dir/
EOF

This file contains the SHA-256 hash values for the sample.txt file and the sample_dir directory.

Now, we can use the hash command with the -c or --check option to verify the integrity of our files against the checksum file:

hash -c sample_checksums.txt

Example output:

5d10c2c4d3dc5711938f617416b2b523c4d4f3ecd85a13d7c0c6f88a45b6ebc  sample.txt
6d5f807e23db210bc254a28be2abb02f48cf35f4c8d486276e2d56cbf0d3cd36  sample_dir/

The output shows that the calculated hash values for the sample.txt file and the sample_dir directory match the expected values in the sample_checksums.txt file, indicating that the files have not been modified.

If the calculated hash value for a file does not match the expected value in the checksum file, the hash command will display an error message:

## Modify the sample.txt file
echo "This is a modified sample file." > sample.txt

hash -c sample_checksums.txt

Example output:

5d10c2c4d3dc5711938f617416b2b523c4d4f3ecd85a13d7c0c6f88a45b6ebc  sample.txt
sample.txt: FAILED
6d5f807e23db210bc254a28be2abb02f48cf35f4c8d486276e2d56cbf0d3cd36  sample_dir/

The output shows that the sample.txt file has failed the integrity check, indicating that the file has been modified since the checksum was generated.

The hash command is a powerful tool for verifying the integrity of files and directories, and it can be particularly useful in scenarios where data security and reliability are critical, such as software distribution, backups, and data transfers.

Summary

In this lab, we learned about the Linux hash command, which is used to calculate cryptographic hash values of files and directories. We explored the basic usage of the hash command, including how to specify the hashing algorithm, verify file integrity, and calculate hashes for files and directories. We created a sample file and used the hash command to calculate its SHA-256 hash value. This tool is valuable for verifying the integrity of data and performing other security-related tasks.

Linux Commands Cheat Sheet