ForensicsWiki will continue to operate as it has before and will not be shutting down. Thank you for your continued support of ForensicsWiki.

Difference between revisions of "Hashing"

From ForensicsWiki
Jump to: navigation, search
 
m
Line 1: Line 1:
Hashing is a method for reducing large inputs to a smaller fixed size output. When doing forensics, typically cryptographic hashing algorithms like [[MD5]] and [[SHA-1]] are used. These functions have a few properties useful to forensics.
+
'''Hashing''' is a method for reducing large inputs to a smaller fixed size output. When doing forensics, typically cryptographic hashing algorithms like [[MD5]] and [[SHA-1]] are used. These functions have a few properties useful to forensics.
  
 +
== Tools ==
  
 
There are literally hundreds of hashing programs out there, but a few related to forensics are:
 
There are literally hundreds of hashing programs out there, but a few related to forensics are:
  
[[md5sum]] - Part of the Coreutils suite, this program is standard on many computers.
+
* [[md5sum]] - Part of the [[GNU]] coreutils suite, this program is standard on many computers.
 
+
* [[md5deep]] - Computes hashes, recursively if desired, and can compare the results to known values.
[[md5deep]] - Computes hashes, recursively if desired, and can compare the results to known values.
+

Revision as of 00:59, 3 May 2006

Hashing is a method for reducing large inputs to a smaller fixed size output. When doing forensics, typically cryptographic hashing algorithms like MD5 and SHA-1 are used. These functions have a few properties useful to forensics.

Tools

There are literally hundreds of hashing programs out there, but a few related to forensics are:

  • md5sum - Part of the GNU coreutils suite, this program is standard on many computers.
  • md5deep - Computes hashes, recursively if desired, and can compare the results to known values.