[{"data":1,"prerenderedAt":187},["ShallowReactive",2],{"content:zh-TW:guides\u002Fmd5-vs-sha256":3},{"id":4,"title":5,"body":6,"description":169,"extension":170,"faq":171,"kind":178,"locale":179,"meta":180,"navigation":181,"path":182,"seo":183,"seoTitle":184,"stem":185,"__hash__":186},"pages\u002Fzh-TW\u002Fguides\u002Fmd5-vs-sha256.md","MD5 與 SHA-256：長度、相容性與信任邊界",{"type":7,"value":8,"toc":159},"minimark",[9,14,18,83,86,89,92,95,98,101,104,107,110,113,116,151],[10,11,13],"h2",{"id":12},"先遵循協定不是先挑最長結果","先遵循協定，不是先挑最長結果",[15,16,17],"p",{},"對方提供 MD5，就計算 MD5，不能拿 SHA-256 比較。自行設計新的通用指紋流程時，SHA-256 通常比 MD5 合適，但一般摘要仍不是身分驗證機制。儲存時必須同時保留演算法名稱。",[19,20,21,37],"table",{},[22,23,24],"thead",{},[25,26,27,31,34],"tr",{},[28,29,30],"th",{},"比較項目",[28,32,33],{},"MD5",[28,35,36],{},"SHA-256",[38,39,40,52,63,73],"tbody",{},[25,41,42,46,49],{},[43,44,45],"td",{},"摘要長度",[43,47,48],{},"128 位元",[43,50,51],{},"256 位元",[25,53,54,57,60],{},[43,55,56],{},"完整十六進位",[43,58,59],{},"32 個字元",[43,61,62],{},"64 個字元",[25,64,65,68,71],{},[43,66,67],{},"一般摘要包含金鑰嗎",[43,69,70],{},"不包含",[43,72,70],{},[25,74,75,78,81],{},[43,76,77],{},"可作為可逆加密嗎",[43,79,80],{},"不可",[43,82,80],{},[10,84,85],{"id":85},"相符究竟代表什麼",[15,87,88],{},"兩個相同結果表示目前輸入與計算規則下的數值一致，無法說明誰提供了檔案。如果檔案與參考摘要都來自同一條被控制的管道，攻擊者可同時替換兩者。需要發布者真實性時，應使用可信管道及對應數位簽章驗證流程。",[15,90,91],{},"MD5 的碰撞弱點在對手刻意構造不同內容時尤其重要。「平常檢查複製檔案可用」不是把 MD5 引入新簽章格式的理由。不過，為歷史介面重現既定 MD5，仍可是一項明確且正當的相容性工作。",[10,93,94],{"id":94},"先比較相同位元組",[15,96,97],{},"abc、abc 加換行、含 UTF-8 位元組順序記號的檔案，是不同輸入。解壓目錄也不是壓縮檔原始位元組。重新命名通常不影響摘要，重新建置或壓縮卻可能改變中繼資料。",[15,99,100],{},"首頁單筆文字同時顯示 MD5、SHA-256、SHA-512；標籤用來區分演算法，應依標籤選擇要核對的結果。核對檔案時選擇發布者指定演算法，並比較完整值，不要只看前幾個字元。",[10,102,103],{"id":103},"訊息驗證與密碼是不同工作",[15,105,106],{},"共享金鑰驗證應使用 HMAC 等明確定義的構造，不是臨時把金鑰與訊息串接。密碼儲存需要專用設計及適當參數，不是改用較長的快速摘要就算完成。校驗工具也不是防毒軟體、簽章驗證器或復原服務。",[10,108,109],{"id":109},"提供可用的核對資訊",[15,111,112],{},"記錄演算法、完整結果與檔案版本。可信參考應與尚未驗證的檔案分開管理。本機匯出可保留識別碼與計算值，不預設包含私密原文或金鑰。不相符時先排查參考來源與版本，再決定是否重新下載或聯絡發布者。",[10,114,115],{"id":115},"相關工具與指南",[117,118,119,127,133,139,145],"ul",{},[120,121,122],"li",{},[123,124,126],"a",{"href":125},"\u002Fzh-TW","MD5 雜湊產生器",[120,128,129],{},[123,130,132],{"href":131},"\u002Fzh-TW\u002Ffile-md5","檔案校驗工具",[120,134,135],{},[123,136,138],{"href":137},"\u002Fzh-TW\u002Fguides\u002Fmd5-checksum-windows","Windows 檔案 MD5 校驗：PowerShell 操作與差異排查",[120,140,141],{},[123,142,144],{"href":143},"\u002Fzh-TW\u002Fguides\u002Fmd5sum-linux","Linux md5sum 使用指南：檔案、清單與換行",[120,146,147],{},[123,148,150],{"href":149},"\u002Fzh-TW\u002Fguides\u002Fwhat-is-md5","什麼是 MD5：原始位元組、128 位元摘要與常見誤解",[15,152,153],{},[123,154,158],{"href":155,"rel":156},"https:\u002F\u002Fwww.rfc-editor.org\u002Frfc\u002Frfc6151.html",[157],"nofollow","RFC 6151",{"title":160,"searchDepth":161,"depth":161,"links":162},"",2,[163,164,165,166,167,168],{"id":12,"depth":161,"text":13},{"id":85,"depth":161,"text":85},{"id":94,"depth":161,"text":94},{"id":103,"depth":161,"text":103},{"id":109,"depth":161,"text":109},{"id":115,"depth":161,"text":115},"比較摘要的實際用途，了解為何校驗相符不等於檔案安全或發布者可信。","md",[172,175],{"question":173,"answer":174},"SHA-256 結果可以和 MD5 參考值比對嗎？","不可以。MD5 為 32 個十六進位字元，SHA-256 為 64 個。應使用參考值指定的演算法重新計算，不能以截斷或補齊的方式互相轉換。",{"question":176,"answer":177},"改用 SHA-256 就能驗證發布者身分嗎？","不能。一般摘要沒有金鑰或數位簽章。應從可信管道取得參考值，需要驗證來源時請遵循發布者的簽章驗證流程。","guide","zh-TW",{},true,"\u002Fzh-tw\u002Fguides\u002Fmd5-vs-sha256",{"title":5,"description":169},"MD5 與 SHA-256：長度、相容性與信任邊界 — md5hash.net","zh-TW\u002Fguides\u002Fmd5-vs-sha256","WlRMp2XizDHSHFk1df8L8jKewA52y6k2uXPwO9-2jcg",1792048885089]