Where to find checksum for BIOS downloads?

Hello. I am following the instructions for upgrading the BIOS on Linux. However, it does not seem that there is a way to verify that the download I have received has not been tampered with, as there are no checksums available. My other laptop is made by Lenovo, and they provide a sha256 checksum for each BIOS upgrade. My operating system provides a GPG-signed checksum of each download. The BIOS is even more important for security, and should be treated with no less care.

Is the following the correct checksum of the current BIOS release?

$ sha256sum Framework_Laptop_11th_gen_Intel_Core_BIOS_3.10_EFI.zip
305af70a2585869eafa0a6353443164befe3bc32301fc1993b779eb9a101ec2d  Framework_Laptop_11th_gen_Intel_Core_BIOS_3.10_EFI.zip
1 Like
$ sha256sum Framework_Laptop_11th_gen_Intel_Core_BIOS_3.10_EFI.zip 
305af70a2585869eafa0a6353443164befe3bc32301fc1993b779eb9a101ec2d  Framework_Laptop_11th_gen_Intel_Core_BIOS_3.10_EFI.zip

Looks good.

Oh and:

$ md5sum Framework_Laptop_11th_gen_Intel_Core_BIOS_3.10_EFI.zip 
b7b2ccbaafaac2c284977fbf71484ac9  Framework_Laptop_11th_gen_Intel_Core_BIOS_3.10_EFI.zip
1 Like