is it normal to have different md5 for apache maven

Question

I am downloading apache marven form this official website

https://maven.apache.org/download.cgi

I downloaded apache-maven-3.3.3-bin.tar.gz and calculated the md5 and the result is 9f0fa573a526785b8e0adb0631687ad5 while the result on the official page is: 794b3b7961200c542a7292682d21ba36

** is that normal? **

then i downloaded apache-maven-3.3.3-bin.zip and for some reason, my mac 10.10.1 gives me a folder after finishing downloading not a zip file

i am worried about the security of that file since there are two different md5 results, is that normal please?

Answer 1

The file must have been corrupted during download. You have to download it again. That is of course assuming you are certain the md5 hash corresponds to that file.

A cryptographic hash of a given piece of data is unique. You cannot have two different hashes for the same piece of data . However, you could have the same hash for two different pieces of data, although that is quite unlikely. That is called a hash collision.