When we download a
ROM file as a stock ROM, is there a way to verify that it is really the stock ROM and is not modified by someone?
Yes, you can check the
You didn't specify which ROM you are downloading. Let's have a look at the Nexus stock ROMs:
There is a download link and a version number and checksums listed like that:
- Version: 4.2.2 (JDQ39)
- Link: https://dl.google.com/dl/android/aosp/mantaray-jdq39-factory-d79f489e.tgz
To verify a checksum you can do it via command line:
$ md5sum mantaray-jdq39-factory-d79f489e.tgz
$ openssl sha1 mantaray-jdq39-factory-d79f489e.tgz
If it matches with the one stated at the google page, you can assume the file is not corrupted or modified.
Note: Linux, MacOS, Windows
The terminal commands only work out of the box in MacOS or Linux. To verify checksums in Windows there is a tool by Microsoft called Checksum Integrity Verifier.