Quartus-lite insecure MD5 checksum

Question

Hello,

I am concerned about about the integrity for downloaded files

Quartus-lite-17.1.0.590-windows.tar

Quartus-lite-16.1.0.196-windows.tar

as they are only accompanied by insecure MD5 checksums.

Could you please forward the message to Intel team and request they provide, either here or on the download page, SHA1/256 checksums of the files?

greg

altera_forum · Answer

Hello,

We are not on reliable internet connection, and this problem is important.

The MD5 is know to be insecure for years and can be hacked to inject malicious code with same MD5 hash result.

I wish Altera/Intel could share this concern and put SHA1 checksum with downloads.

Please either post reply or use forum message to contact me.

greg

Forum Discussion