Helping people with computers... one answer at a time.

I keep seeing references to "MD5" signatures, and even had a security program I run tell me that an MD5 signature wasn't correct. So, what's an MD5 signature?

Well, it's Message Digest algorithm number 5.

That doesn't help, does it?

MD5 is one technique that's frequently used to make sure that a file hasn't been altered.

An MD5 signature, also called an MD5 path or hash, and more officially a message digest, is simply a number. It's a big number (128bits, or 16 bytes, or a number somewhere between 0 and just over 10 to the 38th), that's calculated from the contents of a file. The entire file is read, the bytes combined numerically via a special algorithm and the result is the MD5 hash.

The algorithm for the calculation of that number is designed to be relatively quick to compute, and, perhaps more importantly, very unique.

What do I mean by unique? It's considered almost impossible for two different files to result in the same number being calculated as the MD5 hash. This is important because if a file changes for any reason, the MD5 hash that would be calculated from it would also be different.

Thus, publishing both a file and its original MD5 hash allows you to download a file, calculate the MD5 hash on the file you just downloaded, and confirm, or deny, that the file is correct.

Article C2307 - March 16, 2005 « »

Share this article with your friends:

Share this article on Facebook Tweet this article Email a link to this article
Leo Leo A. Notenboom has been playing with computers since he was required to take a programming class in 1976. An 18 year career as a programmer at Microsoft soon followed. After "retiring" in 2001, Leo started Ask Leo! in 2003 as a place for answers to common computer and technical questions. More about Leo.

Not what you needed?

1 Comment
Baruch Lvovsky
June 20, 2006 6:20 AM

Thank you for detailed explanation.
I recommend to add some references to software
caclulating MD5 Signature.

Comments on this entry are closed.

If you have a question, start by using the search box up at the top of the page - there's a very good chance that your question has already been answered on Ask Leo!.

If you don't find your answer, head out to http://askleo.com/ask to ask your question.