RE: IOS Rookit: the sky isn't falling (yet)

Like MD5 File Validation? - "MD5 values are now made available on Cisco.com for all Cisco IOS software images for comparison against local system image values."

I would expect a real exploit to try to match Cisco's MD5 hashes. By all means, check those hashes after you download them but I would suggest calculating a hash using an alternate algorithm for later checking. --Michael Dillon