I am trying to implement a checksum over multiple files. We can assume, that i have a package containing N files. I want to identify such a package uniquely by following calculation:
SHA256-Hash over every file.
I save the result bytes of the hash-function for every file.
And then i calculate the sha256 hash over the concatenated file-hashes. The reason, why i hash the file-hashes again is, that i want to provide a shorter footprint of the whole package.
From my point of view this should be enough to identify a package. But my knowledge concerning cryptography is really limited at all - so i wanted to ask the experts.
Thanks in advance