I want to check the authenticity of a zip package downloaded.Is it enough to only create the checksum of the zip package and check it in local? Do i need to create the checksum of each file included?
m = hashlib.md5()
file = io.FileIO('test.zip','r')
bytes = file.read(1024)
while(bytes != b''):
m.update(bytes)
bytes = file.read(1024)
file.close()