Intel® Quartus® Prime Software
Intel® Quartus® Prime Design Software, Design Entry, Synthesis, Simulation, Verification, Timing Analysis, System Design (Platform Designer, formerly Qsys)
16606 Discussions

Quartus-lite insecure MD5 checksum

Altera_Forum
Honored Contributor II
‎04-08-2018 02:45 PM
1,287 Views

Hello, 

 

I am concerned about about the integrity for downloaded files 

Quartus-lite-17.1.0.590-windows.tar 

Quartus-lite-16.1.0.196-windows.tar 

as they are only accompanied by insecure MD5 checksums. 

 

Could you please forward the message to Intel team and request they provide, either here or on the download page, SHA1/256 checksums of the files? 

 

 

greg
0 Kudos

Link Copied

1 Reply
Altera_Forum
Honored Contributor II
‎04-10-2018 07:19 PM
548 Views

Hello, 

 

We are not on reliable internet connection, and this problem is important. 

 

The MD5 is know to be insecure for years and can be hacked to inject malicious code with same MD5 hash result. 

 

I wish Altera/Intel could share this concern and put SHA1 checksum with downloads. 

 

Please either post reply or use forum message to contact me. 

 

 

greg
0 Kudos
Copy link
Reply

Community support is provided during standard business hours (Monday to Friday 7AM - 5PM PST). Other contact methods are available here.

Intel does not verify all solutions, including but not limited to any file transfers that may appear in this community. Accordingly, Intel disclaims all express and implied warranties, including without limitation, the implied warranties of merchantability, fitness for a particular purpose, and non-infringement, as well as any warranty arising from course of performance, course of dealing, or usage in trade.

For more complete information about compiler optimizations, see our Optimization Notice.