Skip to content

Hash Tool 1.2.0

Latest

Choose a tag to compare

@github-actions github-actions released this 15 Oct 06:22

A big rework under the hood: faster hashing, standard checksum files, a command-line tool, a Linux build and a long list of fixes.

Added

  • Checksum files: save all hashes as one SHA256SUMS-style file (GNU, BSD tagged, SFV, JSON or CSV), and verify any checksum file: sha256sum/md5sum output, BSD tagged lists, .sfv, xxhsum (XXH3_ prefix) and single-hash files such as image.iso.sha256. Dropping a checksum file on Verify loads every file it lists.
  • Command-line tool hashtool for Windows, macOS and Linux: hashtool hash, hashtool verify (like sha256sum -c), hashtool check and hashtool algorithms.
  • Linux (AppImage) and Intel Mac builds.
  • Open files from the system: optional Explorer context menu on Windows ("Generate hash with Hash Tool", "Verify with Hash Tool"), "Open With" on macOS and --create/--verify command-line arguments. A second launch hands its files to the window that is already open.
  • Settings for files processed at the same time, hard-drive mode, hidden files, hash letter case, default checksum file format and the automatic update check.
  • Updates: optional automatic check (at most once a day), release notes, cancellable download, install now or when closing the app.
  • "Restart as Administrator" (Windows) when files cannot be read, keeping the file list.
  • Developer console: level filter, auto-scroll and export.
  • Keyboard shortcuts: Ctrl/⌘+O (add files), Ctrl/⌘+Shift+O (add folder), Ctrl/⌘+F (search), Ctrl/⌘+Enter (run all), Esc (cancel), Delete (remove).
  • The window remembers its size and position.

Changed

  • CRC32 is shown in the standard byte order used by 7-Zip, SFV files and cksum: "123456789" now gives CBF43926 (1.1 showed 2639F4CB). CRC32 values saved by 1.1 still verify and are marked as using the old byte order.
  • New hashing engine: each file is read once for all selected algorithms, with large double-buffered reads, and several files are hashed at once (large files in their own lane). In benchmarks SHA-256 of a large file is about 1.7× faster than a plain single-buffer read, and 2,000 small files finish about 3.5× faster than one at a time.
  • Adding folders scans in the background, skips unreadable folders and symbolic-link loops, and no longer freezes the window.
  • Settings are written safely; a damaged settings file is backed up and reset instead of breaking the app. The chosen language is saved right away.
  • Daily log files with ISO timestamps (kept 14 days), user folder names masked, and crash reports.
  • Statuses, filters and dialogs follow the selected language immediately, including right-to-left layouts. Automatic language detection picks the right variant (Traditional Chinese for Taiwan and Hong Kong, Latin American Spanish, Norwegian, British English for Australia and others).
  • The colour-blind and high-contrast themes also recolour statuses.
  • Updated to Avalonia 12, the .NET 10.0.13 runtime, Velopack 1.2 and current versions of every library.

Fixed

  • Crash when dropping a folder.
  • The app closing on unexpected errors, such as saving into a read-only folder; errors are now shown in a dialog.
  • Single-letter shortcuts (Shift+A/C/Z) firing while typing.
  • The search highlight showing the end of a file name twice.
  • Split archives (.001, .7z.002) being mistaken for hash files.
  • "Invalid" when loading a hash file that does not name the file, such as SHA256SUMS.
  • The expected hash getting lost when a file and its hash file were dropped together.
  • Calendar and number formatting in logs for some languages (Thai, Arabic, Turkish).
  • Missing, untranslated or misaligned text in several dialogs and languages; the Filipino translation is complete.

Removed

  • The Free Memory button, Force Quit and its timeout setting.
  • Starting as administrator automatically (replaced by "Restart as Administrator" when it is needed).
  • The developer (pre-release) update channel and its disclaimer.

Security

  • Removed the vulnerable Tmds.DBus.Protocol version (GHSA-xrw6-gwf8-vvr9) through the Avalonia upgrade.
  • Checksum files cannot point to network (UNC) or device paths, and exported CSV files cannot inject spreadsheet formulas.
  • Releases are built and tested in GitHub Actions, with SHA256SUMS, SBOMs and build provenance attestations; every pull request is scanned for vulnerable packages, licences and secrets.