On Tue, 12 Jul 2005 19:36:20 +0200, crs  said:

>> > I can understand hoping to verify the file using GPG.  But I never
>> > heard of sha1sum and a search at www.gnu.org couldn't find it

It is part of the coreutils package.

> Provide MD5 and/or PGP means of verification for those of 

MD5 should be considered broken and thus SHA-1 sums are the way to go.
A simple sha1sum tool is available at
ftp://ftp.gnupg.org/gcrypt/binary/sha1sum.c . A windows exe file is
also available at the same location.

Hth,

  Werner