Ignoring requested hash types for some files

[MattAtack]

I ran hashit 1.40 (portable) on a set of test files under Windows 11. I asked it to only run SHA256 and Blake3. It generated the expected output for smaller files, but for larger files, it wrote output with all possible hashes. As shown at the end of the post, the extra/unwanted hash values are also incorrect, as they match the hashes for a zero-byte file.

Command:
hashit -r -c Blake3,SHA256 --no-stream -f json -o "..\hashes.json" "..\files"

JSON output:
[{"File":"..\\files\\file1.bin","MD4":"","MD5":"","SHA1":"","SHA256":"a34e4ea33418bfab416a64ff54d0a5d069f80dfe773c024e267373274a90b1f9","SHA512":"","Blake2b256":"","Blake2b512":"","Blake3":"ad60ae86b1de02fb96ac6bb684df9eb9c50c51d0a81b21b665d11deb98e078e7","Sha3224":"","Sha3256":"","Sha3384":"","Sha3512":"","Bytes":6144,"MTime":"0001-01-01T00:00:00Z"},{"File":"..\\files\\null.bin","MD4":"","MD5":"","SHA1":"","SHA256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","SHA512":"","Blake2b256":"","Blake2b512":"","Blake3":"af1349b9f5f9a1a6a0404dea36dcc9499bcb25c9adc112b7cc9a93cae41f3262","Sha3224":"","Sha3256":"","Sha3384":"","Sha3512":"","Bytes":0,"MTime":"0001-01-01T00:00:00Z"},{"File":"..\\files\\file2.bin","MD4":"","MD5":"","SHA1":"","SHA256":"6b7fca070fc7a40465436face2222ed8baf17b7b4594076bb48d766de2c09053","SHA512":"","Blake2b256":"","Blake2b512":"","Blake3":"f862dd5f2a213a59219feaab5c6d189436cd879f6ed110f8e8e8e4685acf18ab","Sha3224":"","Sha3256":"","Sha3384":"","Sha3512":"","Bytes":12288,"MTime":"0001-01-01T00:00:00Z"},{"File":"..\\files\\file5.bin","MD4":"","MD5":"","SHA1":"","SHA256":"4eefcf1f2c9719c906190a10ef807d393e175db1947620b89bbaca797634b3c9","SHA512":"","Blake2b256":"","Blake2b512":"","Blake3":"7df585a9cf69a14e3a5a6bf9c04dff403c573937e1fcfe4f708c2c7fa06457dc","Sha3224":"","Sha3256":"","Sha3384":"","Sha3512":"","Bytes":38448,"MTime":"0001-01-01T00:00:00Z"},{"File":"..\\files\\file3.bin","MD4":"31d6cfe0d16ae931b73c59d7e0c089c0","MD5":"d41d8cd98f00b204e9800998ecf8427e","SHA1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","SHA256":"39373b4581e5c8068f0614e1e10eda8404a9be0ec8bbca9bf252dd9a48d1e174","SHA512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","Blake2b256":"0e5751c026e543b2e8ab2eb06099daa1d1e5df47778f7787faab45cdf12fe3a8","Blake2b512":"786a02f742015903c6c6fd852552d272912f4740e15847618a86e217f71f5419d25e1031afee585313896444934eb04b903a685b1448b755d56f701afe9be2ce","Blake3":"cfb641b3327e3f26ec02e7c1c69bb49e7d4410296718cbc9679b19bf69abb2f9","Sha3224":"6b4e03423667dbb73b6e15454f0eb1abd4597f9a1b078e3f5b5a6bc7","Sha3256":"a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a","Sha3384":"0c63a75b845e4f7d01107d852e4c2485c51a50aaaa94fc61995e71bbee983a2ac3713831264adb47fb6bd1e058d5f004","Sha3512":"a69f73cca23a9ac5c8b567dc185a756e97c982164fe25859e0d1dcc1475c80a615b2123af1f5f94c11e3e9402c3ac558f500199d95b6d3e301758586281dcd26","Bytes":6140144,"MTime":"0001-01-01T00:00:00Z"},{"File":"..\\files\\file4.bin","MD4":"31d6cfe0d16ae931b73c59d7e0c089c0","MD5":"d41d8cd98f00b204e9800998ecf8427e","SHA1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","SHA256":"4334f1c4fc3a02f37796a1cae54d4838f9fb9784cee6a8e4f80f5db2a6075cee","SHA512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","Blake2b256":"0e5751c026e543b2e8ab2eb06099daa1d1e5df47778f7787faab45cdf12fe3a8","Blake2b512":"786a02f742015903c6c6fd852552d272912f4740e15847618a86e217f71f5419d25e1031afee585313896444934eb04b903a685b1448b755d56f701afe9be2ce","Blake3":"16a003f00c9ce4fc201adf2c9eec7fa318b08c9567c577d5137472f35e5868bc","Sha3224":"6b4e03423667dbb73b6e15454f0eb1abd4597f9a1b078e3f5b5a6bc7","Sha3256":"a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a","Sha3384":"0c63a75b845e4f7d01107d852e4c2485c51a50aaaa94fc61995e71bbee983a2ac3713831264adb47fb6bd1e058d5f004","Sha3512":"a69f73cca23a9ac5c8b567dc185a756e97c982164fe25859e0d1dcc1475c80a615b2123af1f5f94c11e3e9402c3ac558f500199d95b6d3e301758586281dcd26","Bytes":21720951,"MTime":"0001-01-01T00:00:00Z"}]

The same thing happens if I request hashdeep output -- note the unwanted addition of MD5 hashes for larger files:
0,,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,..\files\null.bin 6144,,a34e4ea33418bfab416a64ff54d0a5d069f80dfe773c024e267373274a90b1f9,..\files\file1.bin 12288,,6b7fca070fc7a40465436face2222ed8baf17b7b4594076bb48d766de2c09053,..\files\file2.bin 38448,,4eefcf1f2c9719c906190a10ef807d393e175db1947620b89bbaca797634b3c9,..\files\file5.bin 6140144,d41d8cd98f00b204e9800998ecf8427e,39373b4581e5c8068f0614e1e10eda8404a9be0ec8bbca9bf252dd9a48d1e174,..\files\file3.bin 21720951,d41d8cd98f00b204e9800998ecf8427e,4334f1c4fc3a02f37796a1cae54d4838f9fb9784cee6a8e4f80f5db2a6075cee,..\files\file4.bin

The extra (unwanted) hashes match those for an empty file:
[{"File":"..\\files\\null.bin","MD4":"31d6cfe0d16ae931b73c59d7e0c089c0","MD5":"d41d8cd98f00b204e9800998ecf8427e","SHA1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","SHA256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","SHA512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","Blake2b256":"0e5751c026e543b2e8ab2eb06099daa1d1e5df47778f7787faab45cdf12fe3a8","Blake2b512":"786a02f742015903c6c6fd852552d272912f4740e15847618a86e217f71f5419d25e1031afee585313896444934eb04b903a685b1448b755d56f701afe9be2ce","Blake3":"af1349b9f5f9a1a6a0404dea36dcc9499bcb25c9adc112b7cc9a93cae41f3262","Sha3224":"6b4e03423667dbb73b6e15454f0eb1abd4597f9a1b078e3f5b5a6bc7","Sha3256":"a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a","Sha3384":"0c63a75b845e4f7d01107d852e4c2485c51a50aaaa94fc61995e71bbee983a2ac3713831264adb47fb6bd1e058d5f004","Sha3512":"a69f73cca23a9ac5c8b567dc185a756e97c982164fe25859e0d1dcc1475c80a615b2123af1f5f94c11e3e9402c3ac558f500199d95b6d3e301758586281dcd26","Bytes":0,"MTime":"2026-06-28T22:29:22.8603443-07:00"}]

hashit --version gives hashit version 1.4.0 and the SHA256 for the .exe I'm using is ca29fd61b088aa406550ccf16f42ecd67610128dc02943b6cfcaeefd8efe256b.

[boyter]

Ah this is fixed... just I have not cut a release. I should get onto that. Ill do it probably in August with the next release of Go.