# Difference between revisions of "Hashing"

From ForensicsWiki

Uwe Hermann (Talk | contribs) m |
|||

Line 1: | Line 1: | ||

− | Hashing is a method for reducing large inputs to a smaller fixed size output. When doing forensics, typically cryptographic hashing algorithms like [[MD5]] and [[SHA-1]] are used. These functions have a few properties useful to forensics. | + | '''Hashing''' is a method for reducing large inputs to a smaller fixed size output. When doing forensics, typically cryptographic hashing algorithms like [[MD5]] and [[SHA-1]] are used. These functions have a few properties useful to forensics. |

+ | == Tools == | ||

There are literally hundreds of hashing programs out there, but a few related to forensics are: | There are literally hundreds of hashing programs out there, but a few related to forensics are: | ||

− | [[md5sum]] - Part of the | + | * [[md5sum]] - Part of the [[GNU]] coreutils suite, this program is standard on many computers. |

− | + | * [[md5deep]] - Computes hashes, recursively if desired, and can compare the results to known values. | |

− | [[md5deep]] - Computes hashes, recursively if desired, and can compare the results to known values. | + |

## Revision as of 00:59, 3 May 2006

**Hashing** is a method for reducing large inputs to a smaller fixed size output. When doing forensics, typically cryptographic hashing algorithms like MD5 and SHA-1 are used. These functions have a few properties useful to forensics.

## Tools

There are literally hundreds of hashing programs out there, but a few related to forensics are: