 Files Integrity...Security of Downloaded Packages |
If you wish to verify the integrity of the downloaded Speedcrypt files, you can perform a HASH calculation on the files themselves and compare the resulting values with the reference hashes provided below. This verification process allows you to confirm that the downloaded package has not been altered, corrupted, or tampered with in any way. Hash verification represents a fundamental security control and is strongly recommended before executing or installing any cryptographic software. It provides independent validation of file authenticity and helps ensure that the distributed package exactly matches the original release.
This verification can be performed using appropriate online services or through dedicated software tools. I personally recommend using the EasyHash Calculator, which allows direct and reliable calculation of supported hash functions for comparison purposes. If the calculated hash matches the published reference value, the integrity of the downloaded file can be considered verified. Any mismatch should be treated as a warning condition, and the file should not be used until the discrepancy has been resolved.
EasyHash is software for generating Digital HASH Signatures that is very simple and intuitive, extremely easy to use, and at the same time highly useful. With this software, you can verify the security of your downloads by comparing the hash signatures generated by the developers of the software you intend to download from the internet. Its ease of use is combined with very high execution speed and a range of options that simplify the user's workflow.
This repository is crucial for cryptographic engineers, cryptanalysts, and security experts who demand absolute structural validation. It provides the official source code, enabling deep protocol audits, mathematical implementation reviews, and complete behavioral analysis of the suite. Independent researchers can rigorously verify the integration of engines, custom file destruction mechanisms, and entropy systems directly from the codebase. This open environment fosters collaborative review, absolute transparency, and trusted cryptographic engineering practice within the global cybersecurity community.
Note: OpenPGP Signatures can be verified with my Public Key listed at the bottom of this page or, if you want, download it from my site, as well as the signatures themselves. Downloads are absolutely safe! Executable Integrity |
✒️ Technical Overview: Multi-Layer Integrity and Cryptographic Non-Repudiation
To guarantee the highest standards of supply chain security and ensure absolute data integrity, this release platform provides a multi-layered verification framework. The compliance strategy aligns with international distribution protocols—such as those implemented by SourceForge—by simultaneously publishing cryptographic checksums alongside a detached OpenPGP digital signature applied directly to the compiled binary.
1. ✏️ Multi-Hash Cryptographic Redundancy (MD5, SHA-1, SHA-256)
The implementation of a heterogeneous hashing strategy serves specific architectural and operational purposes:
- SHA-256 (Secure Hash Algorithm 2): Deployed as the primary cryptographic standard to protect against collision attacks. It provides a 256-bit fixed-length fingerprint, ensuring long-term resistance to computational tampering and modern cryptanalysis.
- SHA-1 and MD5: Maintained strictly for legacy system compatibility, high-speed computational verification, and cross-platform alignment with standard repository indexers. While legacy algorithms are susceptible to theoretical collisions under specific workloads, their concurrent evaluation alongside SHA-256 creates an intersection of checks that mathematically invalidates localized file alteration.
2. ✏️ OpenPGP Cryptographic Signature on the Executable (Authenticity & Non-Repudiation)
While cryptographic hashes effectively validate file integrity (confirming that the file stream has not been corrupted or modified during transit), they cannot independently guarantee origin authenticity if the publication channel itself is compromised.
To bridge this trust gap, the compiled executable binary is explicitly signed using a personal OpenPGP Public Key. This process guarantees:
- Cryptographic Authenticity: Proves unequivocally that the binary executable was generated directly by the author and has not been intercepted, unpacked, or replaced.
- Non-Repudiation: Ensures that the distributed application can be traced back to its legitimate source with mathematical certainty, neutralizing man-in-the-middle (MitM) attacks or unauthorized repository mirrors.
Once you have downloaded the setup packages (Setup.exe) or the Portable version, and completed the deployment of Speedcrypt, you can immediately perform an independent validation check. This real-time verification acts as a definitive security control, allowing you to mathematically confirm that the executable binary running on your system is the absolute, untampered original cryptographic artifact generated by the author. By comparing the installed binary against these official signatures and multi-hash records, you eliminate any residual risk associated with distribution channels, ensuring that your local software instance remains completely secure, verified, and pristine before executing any encryption workloads.
📒 Author’s Note on Multi-Layered Protection Strategy
I have deliberately implemented this additional level of security control for the following fundamental reasons:
- Protection Against Post-Deployment Tampering: In the event that a user's local system is compromised by malware—such as a Trojan or ransomware—the local
Speedcrypt.exeexecutable already installed within the system directory could be silently modified or replaced. Under such threat vectors, validating the original, initial installation package becomes ineffective. By providing the standalone reference cryptographic hashes and digital signatures directly on this platform, users can audit and verify the absolute integrity of their active executable at any time—even months after deployment—ensuring the application has remained pristine on their storage media. - Absolute Verifiability for Portable Deployments: Portable software distributions are frequently unpacked, migrated across external storage devices, shared between operators, or archived within network directories. Throughout these operational life cycles, the original parent archive is often discarded or lost. Empowering users to directly audit the standalone, extracted
Speedcrypt.exebinary ensures comprehensive flexibility and immutable cryptographic assurance for high-mobility and field environments. - System Process and Binary Auditing: System administrators, security operations centers (SOC), and digital forensics professionals routinely analyze standalone binaries, isolated files, or active processes residing within the system RAM. Publishing un-archived reference metadata directly on this site facilitates seamless independent auditing, allowing technical teams to quickly map local execution signatures against my authenticated release standards.
Speedcrypt.exe:MD5: 069A5B42 D2E792E0 C66439A2 68503778
SHA-1: 9FC10478 5FE8FCA1 86A89D68 B30675AE E1069518
SHA-256 : 5A1F7E6B D93C9212 DBCFBAE2 8EE66EB8 5846C13DD8FFBC78
ACFF2AD4 1ECF38C0
SIZE: 1651200 B
Generated by EasyHash
-----BEGIN PGP SIGNATURE-----
iQIzBAABCAAdFiEEuW+XWm+o7R0EQfnzLbtURC0JlDQFAmrJ+SoACgkQLbtURC0J
lDSUiA/+KC8uUVwZM2aqlul2anQslr/sVGLl70fcbuUaF0Dbc9qanyoylxonR4XS
xS8OEySrXVQ/Wk8kk/nUenFVS9M4vkeYT8zHDf5gREKYplYfbwMBNqSTOW9t7xcI
3lS0Q46UzNXrYQ1ogF5Nof7lnan5YNcr575JoO9L2jZRETxmwZwetrRje7sM99IA
+MjvkMzVSOYlbhHJ40af3g5lLKPkK1fykUwNeKlxt0yn/1eABk2QehEvMgfq/q7n
cysX3NCmxoJaKd/4qFrFV/KxJ2ImZwGBoFuTZepqa6s0I7pmt7vjp31nSMaQzZJq
3lAdRvCO2aA1ADlYUYeK5eNWg42E/TnhhItW1Yk6RUilFQTZnb0SKGmHGRHFO3ER
65kbx1s4QScOBOCbS8Z/+9n0R1WN/Bma25rfeDSj4Td5mCEsPB4P4R465ws/fov7
4Ll202UJp9T+reyA/b6aTJLpRwir6iR2WAORnbAv2lMVDKTNtOIRlHT95hTc4vvn
KyJxqBVVQd2vo8HKLTT/OsEGsHgZqdVCxGVmmOH8gKPb5UO97YTdCLEedC+K/1Zy
vB4I2Utxrtmzdfod3cgEzC9fj/xwbxSr5anJfvN06p9sKE+Y7NBd6MVQpVPd6K3Y
e5i9Sf52mlhn2qyc+6NK2cSENn9x2Qv49Nn83h38PkY4E84Rd8Q=
=5fyO
-----END PGP SIGNATURE-----
 Hashes and Signatures |
Speedcrypt-2.0.0.0-Setup.exe:MD5: FB37BFF4 6C5991BE DE653999 FDC48C24
SHA-1: 5FFDD051 01C318F8 0DB1DA51 6CE3D9A5 3847DFBF
SHA-256 : 01F54851 156B27EE 68A79BF9 14D781D0 2A72282C 31DF0339
9AC80C90 D4541F57
SIZE: 6360238 B
Generated by EasyHash
-----BEGIN PGP SIGNATURE-----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=ZxAr
-----END PGP SIGNATURE-----
Speedcrypt 2.0.0.0-Portable.zip:MD5: EA99599C 414D8CB0 FC0B9775 96C566F4
SHA-1: 860650D2 B0C8F609 D7F28D04 B155EA07 941F33C9
SHA-256: AA7161C0 01B0A9B0 F7E05276 C72682D6 5D9291D1 9AEB119D
5ABA62CD DBC1DBE9
SIZE: 5685149 B
Generated by EasyHash
-----BEGIN PGP SIGNATURE-----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=m33S
-----END PGP SIGNATURE-----
Speedcrypt 2.0.0.0-Source.zip:MD5: B20131F3 168E995D 7ABCC1D1 1C73EE54
SHA-1: 833B85F0 72EC16D6 E2997F42 12DBF6B4 3BC24A73
SHA-256: D05953C1 7582EEAA CF8B47B1 05D1E7DC 2108BC6E19CA7F60
D028476E 253D549E
SIZE: 6862768 B
Generated by EasyHash
-----BEGIN PGP SIGNATURE-----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=Z52x
-----END PGP SIGNATURE-----
Softpedia guarantees that Speedcrypt is 100% Free, which means it does not contain any form of malware, including but not limited to: spyware, viruses, trojans and backdoors. |  | |
Speedcrypt Ver. 1.0 PGP Signatures: Speedcrypt-1.0-Setup.exe:MD5: A6581DB3 1AC9B682 5080481F 48D50E95
SHA-1: C2175959 8803CAAF 8D9B8359 C2A64176 E2AF0F4E
SHA-256: 7D19724D 203B0B82 EDC94287 59E1569E 70271B4E 7166272C
3B03E597 0C12BEDE
SIZE: 6381568 B
Generated by EasyHash
SIG: Download ASC File
Speedcrypt-1.0-Portable.zip:MD5 : EE164B13 5B9F1D57 A1E92533 2320E307
SHA-1 : 7D955A48 64A562AE EBC06D6C DF34D9E2 43EAE410
SHA-256: 5176DE45 858FFA35 CE1AB480 2DA93311 8823EC38 3649D02B
A7CD3919 A3F3CDCC
SIZE: 6160384 B
Generated by EasyHash
SIG: Download ASC File
SPC1.0-Source.zip:MD5 : 9679842A 93E7A573 6870B6BF F5875D66
SHA-1 : C6157E29 1185D6A5 06CA95AC 517E88B0 0CBD8B29
SHA-256 : 17ABB0CB A8F5C0DF 26E520D1 E7F9FB29 7CA69161 4EB8B7FF E1517F0E 6A4CDEF8
SIZE: 37638144
SIG: Download ASC FILE
SPC1.0-PRT-Source.zip:MD5 : EA71AC5B 5989F4E4 F62C54F3 1A209EFD
SHA-1 : 63B9A998 BA8859DC 220F898A 13682278 7C3521F8
SHA-256: A9595CA0 EEB491C9 6DEA8B69 2BBDEB8D F272D546 4BCD16DF 1AD2E08E ABA0D1FB
SIZE: 40509440 B
SIG: Download ASC File
Speedcrypt Ver. 1.3 PGP Signatures: Speedcrypt-1.3-Setup.exe:MD5: 71627961 D30E8F43 077F00E0 293C23D5
SHA-1: 25566C05 C3EE4F53 5C687679 7A661996 CC4C7FF9
SHA-256: F8F29899 31F60195 0996A711 7A60788F 66F83E69 D0108E60
2C67E092 1169166D
SIZE: 6392000 B
Generated by EasyHash
SIG: Download ASC File
Speedcrypt-1.3-Portable.zip:MD5: C65A6399 486A27B5 4A5F4D9B F3FACDC9
SHA-1: 0EF88976 53785043 A0EF07DF 88038888 957D0A6B
SHA-256: C11A483F AE200F64 AB477C68 9AF6C664 D5CE5500 20844747
52536411 3AC11ED7
SIZE: 6193000 B
Generated by EasyHash
SIG: Download ASC File
SPC1.3-Source.zip:MD5: AACFA7AA 1F4F59C2 EAC72752 A39ED549
SHA-1: C06772BF 686EF2C0 08C7B50E FABA8C40 C4218C55
SHA-256: 3D82FDA7 6A923A1E EA8C85FC D9FB3A28 BFC1B477 B41F880A 4EC4F8FC 7AAF57AF
SIZE: 36753000 B
SIG: Download ASC File
SPC1.3-PRT-Source.zip:MD5: DCF3F0E8 DE971A45 C13AC266 1E37C715
SHA-1: 515B38DE CF4CCA82 FA095DAC 2B77DDCE C9BF2F77
SHA-256: 27167437 FE146248 819F85F4 4775233B 28BFDFC9 BE4831BD E26E810B 3226E5A4
SIZE: 43130000 B
SIG: Download ASC File
Speedcrypt Ver. 1.5 PGP Signatures: Speedcrypt-1.5-Setup.exe:MD5: 50EDEC48 BAE0C5BE 9CF2B71F 4ED1BB4D
SHA-1: 7ACEBADB DE530C45 02C6EC5C 3ADC68BA 53DB0C50
SHA-256 : AAC3D534 562EF789 80236D4A 60FF0397 3281833E 20933877
68283C1E 290F9587
SIZE: 6144000 B
Generated by EasyHash
SIG: Download ASC File
Speedcrypt-1.5-Portable.zip:MD5: 2CD4179F 40954228 DDDFFA4A 2563B88A
SHA-1: 11274A90 6C55EF21 621C50D9 2CA0A8EB F82F683C
SHA-256: 023F516F 07177601 EA2C0892 5A4D089F 2742928D 8F4000BA
79CDA63E 68A1AFFF
SIZE: 5959680 B
Generated by EasyHash
SIG: Download ASC File
SPC1.5-Source.zip:MD5: 55E60067 131022EC FF09585F A65F23B8
SHA-1: 72FEC337 7CB1DAD6 5FE64266 503FE19F 2688AEB3
SHA-256: 02B7C6F7 4DF4C230 78B7DBCC ABEE4766 78226AB3 02E2A184 64E82B2A 63D58603
SIZE: 39874560 B
SIG: Download ASC File
SPC1.5-PRT-Source.zip:MD5: 5C5BAEB7 08FD35CB 996DB026 9DC9C16A
SHA-1: 695931F0 E65ABD12 99C8B013 9E53720A B493A413
SHA-256: 33F5A108 7463E4E4 FFF00427 5327AE12 25BC9E24 11C95D33 D48CD35A 9A550AF9
SIZE: 39862272 B
SIG: Download ASC File
| OpenPGP Public Key |
✒️ Old PGP Keys | |||
🔐Key ID: | ✍️Key Fingerprint: | 📝ASC File: | |
FC8E 9FB8 8E02 70DF | 6F52 CE06 F752 74C6 3CBD 8E9D FC8E 9FB8 8E02 70DF | ||
✒️ Current PGP Key
 | Mariano Ortu | |
Key ID: | 2DBB 5444 2D09 9434 | |
Key Fingerprint: | B96F 975A 6FA8 ED1D 0441 F9F3 2DBB 5444 2D09 9434 | |
Mariano Ortu PGP Public Key: | Download [ASC File] |
This section provides the OpenPGP Public Keys associated with the Speedcrypt Project for signature verification, authentication, and historical reference. Both legacy and current keys are published to ensure continuity of trust and allow independent verification of software packages, signed files, and official project communications. The Current PGP Key should always be used to verify OpenPGP signatures associated with active releases of the Speedcrypt Project. By validating signatures with the published Key ID and full Key Fingerprint, users can confirm the authenticity of distributed software and verify that the files originate from the legitimate project source and have not been altered.
The Old PGP Keys are provided for archival and compatibility purposes. They remain available to verify signatures applied to previous releases, historical source packages, or earlier project documentation signed before key rotation. Maintaining access to previous public keys preserves the integrity of the trust chain across the evolution of the project.
Users are strongly encouraged to verify the full Key Fingerprint before importing or trusting any public key. Fingerprint verification represents the primary method for confirming that a key is authentic and has not been substituted, compromised, or falsified.
The ASC files provided in this section contain the exported public keys required for OpenPGP signature verification and can be imported into compatible software for independent validation procedures. These verification practices constitute an essential part of the security model of the Speedcrypt Project and are strongly recommended before trusting software packages, source code archives, or signed communications. Additional information can be found on this page of my official website
When you download the Speedcrypt Project, always verify that the published hash values match the calculated values of the downloaded files. Do the same for OpenPGP signatures by comparing the signing key against my Key Fingerprint provided on this page. These verification procedures are strongly recommended not only for the Speedcrypt Project, but for any security-sensitive software. Making independent integrity and authenticity checks a standard practice is a fundamental habit for responsible and secure software use.