Good question. It might be considered a derivative work, but I think that would be a new interpretation of that phrase. Big-picture answer is that most people who write and interpret laws do not know what SHA-1 is, so current laws might not cover TPB with respect to copyright law. It might also be that technology makes some laws silly or at least much harder to enforce, and copyright laws might be one such example.<p>IANAL, but here&#x27;s one argument against TPB: a checksum of a &quot;controlled file&quot; seems to me akin to the code name of a &quot;controlled substance&quot;. If a guy tells you that if you want heroin, you should ask around for &quot;wombats&quot;, and then you go ask around for &quot;wombats&quot; and buy some heroin, did the dude that told you the code name do something illegal?<p>Now what if he was just a robot that repeated what he heard, and gathered reviews? &quot;I heard heroin is called wombat, and 100 people are happy with that information&quot;. TPB does a little more than that (monitor the number of seeders &#x2F; leechers, which is integral to prevent fake torrents being submitted), and makes quite a pretty penny off of their services, as well.