cgsecurity.org

Hello.
How can I check the integrity of the downloaded TestDisk zip file?
The site links to a public signature of the developer, but not of the individual downloaded files.

You can't. Here are some hashes for today's version of 7.3-WIP for Windows, 64 bit. I created them after downloading this file.

CRC32: 4451BCB5
MD5: 7AB3D4CEB4A8CF6371D113413E450996
SHA-1: 164FA2062940C23BB283AC5D612B353BD63C4BF8
SHA-256: 47E94021B2209888416B98DDC744EBEFEAA0E3B2E7918AC2C15FA352D96DB912
SHA3-512: 4107FCF132C32BC2B81131B10BDACB84FC734126763977F45D0AD64CDA3236137876CAFE7583FA5DFF348DFC0BDF63F98CCC9FB69A88E167FF359CA7EF5B3332
Whirlpool: 87B4E9597CD74F2C9A41BE5A6A05E9CBBF51923AAF24AA362BB1A082D969B3445964E45C41B69BEB31FFE97BFD01B7A1F5999ECE1C491928A96C00E9FB7042B6

In the windows world, use a tool such as the free and open source tool OpenHashTab to compare your hashes with those.
CRC32, MD5 and SHA-1 are outdated.

In the future, have some friend at a physical location far away from you download the same file. Create a hash or a couple of them and compare!

The hashes you posted don't match the hashes I am getting...
I can't help but feel like there must be a better way to do it.

Maybe the current version was updated.
The current way to distribute does not involve the calculation of hashes.

Here are the hashes for the Win64-version 7.2, file size: 27.354.549

CRC32: AC47772C
MD5: 5BC6BD82A34BEADF36A1FE0C171373F9
SHA-1: 1CB280C43F6382FED8E1E450B6D8FEE6D15F84F1
SHA-256: E97E203CE77B6B1A3A37D01BECCF069DC6C4632B579FFBB82AE739CDDA229F38
SHA3-512: B5905C6DE65EB093F7B8DA47DBCBDFE99DA673C4C1C4269E3300AD1912B2704D392910CA45287E1507B142BB28BCFF7B591B52BD9D8191F2FC83C15C90C774D6
Whirlpool: 4CB06BAB17834D0CE414C07808EE63E56FF03BEB25844D2F8E58828F65134D2C9C090DA8CC416748F917BC0386DD2EAD4EB6B66BB165FF1B9E6522F5E7F04EDA

Did you calculate these hashes after unzipping the files?

I think it is obvious, that these are all different hashes for one file, the downloaded zip archive.
The different hashes are not for different files - they are listed for your convenience, depending on which hash algorithm your hash software is using.

The hashes I'm getting for both the 7.3 as well as the 7.2 zips do not match those you posted. Perhaps some other user can bear in and calculate, say, the sha-512 hashes and compare them to those posted by recuperation?

Please provide all necessary information now.

"I don't get the same information as you" does not qualify as a bug report.

It's not a bug report.
What information do you require?

1. Description how you downloaded the file
2. Name of the file
3. length of the file
4. A description of how you calculated the hashes, describing the software you used.