A systems administrator is implementing a file storage solution that stores files using integrity verification. Which of the following algorithms is most resistant to collisions?

SHA-2 (encompassing SHA-256, SHA-384, and SHA-512) produces large, fixed-length digests through a robust Merkle-Damgard construction with no publicly known practical collision attacks. Its output sizes make brute-force and birthday attacks computationally infeasible with current hardware. NIST standardized SHA-2 specifically for integrity verification in security-sensitive applications, making it the correct choice here.

MD5 produces only a 128-bit digest and has well-documented, practical collision vulnerabilities demonstrated by researchers, rendering it cryptographically broken for integrity use.

CRC32 is a cyclic redundancy check designed purely for error detection in transmission, not cryptographic security, and collisions can be trivially engineered.

RIPEMD-160 provides reasonable collision resistance but its 160-bit output is smaller than SHA-256 or SHA-512, giving it a narrower security margin against birthday attacks compared to SHA-2.