As part of my job I often find myself transferring lots of files between my computer and a remote storage space accessible over SFTP. To ensure the files' correct transfer I compute their SHA256 hashes prior to transferring them, transfer them, then verify these hashes on my computer. However, this can be very lengthy since I often download several gigabytes on my computer from the remote storage.
Now, I have been curious about forcing SCP to use HMAC-RIPEMD160 to ensure message integrity (
-o MACs=hmac-ripemd160). It's the strongest HMAC supported by my servers, and admittedly it is weaker than SHA256, but if I rely on SSH's own mechanisms to ensure message integrity, in principle it should be enough to not have to spend a long time calculating and then verifying file hashes when transferring stuff.
So, to wrap it up: can I replace computing and verifying file hashes with using SCP with HMAC-RIPEMD160?