Is it enough to create a zip packet checksum instead of each file

Question

I want to verify the authenticity of the zip download package. Is it enough to create a checksum of the zip package and check it locally? Do I need to create a checksum for each file?

    m = hashlib.md5()  
    file = io.FileIO('test.zip','r')  
    bytes = file.read(1024)  
    while(bytes != b''):  
        m.update(bytes)  
        bytes = file.read(1024)   
    file.close() 

Answer 1

I assume you are asking a question about MD5 measures , ( ). ZIP , ZIP- ( ) "" . ZIP , . , ().

-, (.. ) SHA-1 Git . , Git , .

Answer 2

ZIP .

. .zip .