Authors
Jerald Benny
Abstract
In the current digital era, ensuring the authenticity and integrity of files is a fundamental challenge in digital forensics and cybersecurity. This study presents the design and implementation of a File Integrity Verifier (FIV), a Python-based tool with an interactive graphical user interface (GUI) for verifying file integrity using multiple cryptographic hash algorithms. The tool generates both text and PDF-based reports containing hash values for individual files and can later verify the same files to detect any form of alteration or tampering. FIV employs popular hashing algorithms such as MD5, SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, BLAKE2, and SHA-3 variants. The GUI integrates light/dark themes for user convenience, while the generated reports are formatted in a readable tabular form with wrapped content for long hash strings. The experimental results confirm that any alteration in file content produces a completely different hash value, demonstrating the reliability of cryptographic hashing for integrity verification. This project emphasizes the importance of hash-based validation as an essential digital forensic process for ensuring evidence authenticity.
In the contemporary digital landscape, the integrity and authenticity of electronic data have become vital concerns for individuals, organizations, and especially forensic investigators. Every day, vast volumes of data are created, transmitted, and stored across multiple digital devices and networks. These files may include crucial documents, multimedia evidence, system logs, or legal records — all of which can be easily manipulated, intentionally or unintentionally. Such manipulations may go unnoticed unless a systematic mechanism exists to verify the originality of the digital evidence. Hence, file integrity verification plays a fundamental role in digital forensics, cybersecurity, and evidence management systems.
File integrity verification involves ensuring that a file’s content has not been modified from its original version. The most reliable and widely accepted method to accomplish this is through cryptographic hash functions, which transform data into a fixed-length hash value that acts as a unique digital fingerprint for that file. If even a single byte of the file changes, the resulting hash value will differ significantly, thereby signalling potential tampering. This property known as the avalanche effect ensures the effectiveness of hash algorithms in integrity validation.
Hash functions such as MD5, SHA-1, SHA-2, SHA-3, and BLAKE2 are among the most recognized and standardized algorithms used for this purpose. They are computationally efficient and produce hash digests that are practically impossible to reverse or replicate intentionally without altering the original file. In digital forensic field, these hash values serve as digital signatures, ensuring that evidence presented in court remains unaltered from its original acquisition state.
Traditional integrity verification processes in digital forensics often rely on command-line tools or manual hashing, which can be cumbersome for investigators dealing with multiple files or directories. Moreover, the results generated in raw text formats can be difficult to interpret and present in official forensic documentation. This project bridges that gap by introducing a File Integrity Verifier (FIV), an automated, GUI-based tool designed to simplify, visualize, and standardize the integrity verification process.
Developed entirely in Python, FIV integrates multiple hashing algorithms within a single interactive interface. It enables users to select files or entire folders, generate hash values using different cryptographic standards, and export well-structured reports in both text and PDF formats. The tool also includes a verification feature that allows investigators to compare newly generated hashes against previously saved manifests to detect any instances of tampering or data loss. By offering a clear and accessible interface with light and dark mode themes, FIV improves usability for both novice and expert forensic practitioners.
Furthermore, the tool emphasizes the importance of transparent and verifiable documentation in digital evidence handling. The generated PDF reports include formatted tables and file metadata, ensuring that forensic analysts can include these outputs directly in their official case documentation. Each report maintains visual consistency and legibility, highlighting mismatches and missing files with clear distinctions.
In essence, FIV provides an automated, accessible, and visually refined solution for ensuring digital file integrity. The tool reinforces the principle of trust through verification, enabling investigators, cybersecurity professionals, and researchers to authenticate files quickly, accurately, and confidently. By combining cryptographic rigor with a modern interface, the File Integrity Verifier sets a strong foundation for integrating automated integrity verification into everyday forensic workflows.
References
Casey, Eoghan. Digital Evidence and Computer Crime: Forensic Science, Computers, and the Internet. 3rd ed., Academic Press, 2011.
Casey, Eoghan. “Practical Approaches to Recovering Digital Evidence.” Forensic Science Review, vol. 31, no. 1, 2019, pp. 45–64.
Easttom, Chuck. System Forensics, Investigation, and Response. 4th ed., Jones & Bartlett Learning, 2023.
Garfinkel, Simson L. “Digital forensics research: The next 10 years.” Digital Investigation, vol. 7, 2010, pp. S64–S73. Elsevier.
Kessler, Gary C., and John S. Haggerty. “An Overview of Hash Algorithms and Their Role in Digital Forensics.” Journal of Digital Forensics, Security and Law, vol. 9, no. 2, 2014, pp. 1–14.
Menezes, Alfred J., Paul C. van Oorschot, and Scott A. Vanstone. Handbook of Applied Cryptography. CRC Press, 1996.
National Institute of Standards and Technology (NIST). Secure Hash Standard (SHS): FIPS PUB 180-4. U.S. Department of Commerce, 2015.
Nelson, Bill, Amelia Phillips, and Christopher Steuart. Guide to Computer Forensics and Investigations. 7th ed., Cengage Learning, 2022.
Nolan, Richard, et al. Guide to Integrating Forensic Techniques into Incident Response. Carnegie Mellon University, Software Engineering Institute, 2005.
Russell, Deborah, and G. T. Gangemi Sr. Computer Security Basics. 2nd ed., O’Reilly Media, 2006.
Schneier, Bruce. Applied Cryptography: Protocols, Algorithms, and Source Code in C. 2nd ed., Wiley, 1996.
Stallings, William. Cryptography and Network Security: Principles and Practice. 8th ed., Pearson Education, 2023.
Tobiasz, M., and P. Rutkowski. “Integrity Checking and Data Authentication in Digital Evidence.” Applied Computer Science, vol. 16, no. 2, 2020, pp. 60–74.
United States Department of Justice. Electronic Crime Scene Investigation: A Guide for First Responders. 2nd ed., Office of Justice Programs, 2008.
Van Der Knijff, Ronald. “Hash-Based Evidence Authentication in Digital Forensics.” Forensic Science International: Digital Investigation, vol. 22, 2017, pp. 38–49.
Zimmermann, Paul. An Overview of SHA-3 and Modern Cryptographic Hashing. National Institute of Standards and Technology, 2021.
Python Software Foundation. hashlib — Secure Hash and Message Digest Algorithms. Python Documentation, version 3.12, 2024, https://docs.python.org/3/library/hashlib.html.
ReportLab Developers. ReportLab User Guide: PDF Generation for Python. ReportLab Inc.,
2024, https://www.reportlab.com/documentation/.
How to cite this article?
| APA Style | Benny, J. (2026). File Integrity Verifier (FIV): A Cryptographic Hash-Based Approach for Digital File Integrity Verification. Academic Journal of Forensic Sciences, 9(2), 1–9. |
| Chicago Style | |
| MLA Style | |
| DOI | |
| URL |