LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 12-15-2010, 02:25 PM   #1
anomie
Senior Member
 
Registered: Nov 2004
Location: Texas
Distribution: RHEL, Scientific Linux, Debian, Fedora
Posts: 3,935
Blog Entries: 5

Rep: Reputation: Disabled
ssdeep: fuzzy hashes and "almost identical" files


I happened upon an intriguing utility this morning by way of Open Source Digital Forensics (which I discovered on one of Bruce Schneier's blog entries):

ssdeep : "Recursive computing and matching of Context Triggered Piecewise Hashing (aka Fuzzy Hashing). Supports Windows, *nix, BSD, OS X, etc."

The main interest area to me is its "matching mode", which uses so-called fuzzy hashing to produce a weighted score, indicating the extent of the match.

(BTW, I found one brief mention of this utility on LQ here, but decided to give it its own honorary thread.)

Last edited by anomie; 12-15-2010 at 02:26 PM.
 
Old 12-15-2010, 02:50 PM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Good call. I used Jesse Kornblums md5deep (actually contains MD5, SHA-1, SHA-256, Tiger and Whirlpool) quite a few times for finding piecewise hashes.
 
1 members found this post helpful.
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Md5 hashes and "Man in the Middle" ambushes entz Linux - Security 6 01-11-2008 01:48 AM
Radeon x1600 xt on Vectore 5.8 "fuzzy display" Tadaen Linux - Hardware 1 03-10-2007 05:10 AM
How do i "copy" one bios and "paste" it onto another identical machine Yerp Linux - Hardware 2 01-10-2007 08:31 PM
Artork on console and bootsplash appears "fuzzy" General Linux - General 0 08-29-2005 03:53 PM
"X-MS" cant open because "x-Multimedia System" cant access files at "smb&qu ponchy5 Linux - Networking 0 03-29-2004 11:18 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 12:22 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration