The Concept
The concept is very simple. You download a file. The website you downloaded a file from (nicely) provides you with a hash to verify the file you have in your Downloads folder matches what the website thinks you downloaded.
The app was inspired by this post about a
malicious copy
of HandBrake going around. As most people don't download a file, pop
open the
Terminal, run shasum /path/to/file and check the hashes match, I figured I'd make a go at
making the act of hash checking simple.