The hashes of downloaded files, computed locally. E.g. with 'sha1sum' command or Microsoft's 'fciv'. Suppose I download Putty and am unsure of whether it's the

The hashes of downloaded files, computed locally. E.g. with 'sha1sum' command or Microsoft's 'fciv'. Suppose I download Putty and am unsure of whether it's the real thing or whether it's a Trojan, e.g. due to someone having hacked my router. I compute the hash of the file and google it: http://lmgtfy.com/?q=44ac2504a02af84ee142adaa3ea70b868185906f http://lmgtfy.com/?q=44ac2504a02af84ee142adaa3ea70b868185906... . I find many sites saying that's putty.exe. If I didn't, I'd be very suspicious.