Verify

Checksums

Every download on this site, with the SHA-256 it should hash to. If your copy produces the same number, it arrived exactly as it left.

Reading downloads/SHA256SUMS…

The same list as plain text: SHA256SUMS.

macOS and Linux

# one file
$ shasum -a 256 mde-1.0.0-macos-arm64.dmg

# or the whole list at once
$ shasum -a 256 -c SHA256SUMS

# on Linux, sha256sum instead
$ sha256sum -c SHA256SUMS

Windows

# PowerShell — SHA-256 is its default
> Get-FileHash mde-1.0.0-windows-amd64.zip

# or the built-in certutil
> certutil -hashfile <file> SHA256

The macOS disk images are signed with a Developer ID certificate and carry a stapled notarization ticket, so macOS checks those on its own as well.