Skip to main content
Tool Factory

Hashing & Checksums

SSDEEP Digest Calculator

Calculate or verify a digest with SSDEEP. Enter the data, choose the digest options, then copy the calculated value.

Tool workspace

Your input stays in this browser.

Add the required input to continue.

Needs input

You can run the tool again after any change.

Your result appears here

Calculate or verify a digest with SSDEEP. Enter the data, choose the digest options, then copy the calculated value.

This tool runs open-source code from CyberChef by GCHQ (Apache License 2.0). See open-source credits.

SSDEEP Digest Calculator uses SSDEEP for the supplied input. The operation returns a context-triggered piecewise hash that supports approximate similarity checks. The digest or checksum format is specific to SSDEEP Digest Calculator.

The operation returns a context-triggered piecewise hash that supports approximate similarity checks. The digest or checksum format is specific to SSDEEP Digest Calculator. This result runs in the browser for this catalog category. Processing runs in the browser.

Fuzzy hashing exposes similarity structure; it does not provide collision-resistant authentication.

Instructions

  1. Provide text or data for this tool.
  2. Use short non-sensitive samples while testing. This applies to SSDEEP Digest Calculator.
  3. Save the exact input encoding with each fuzzy hash. This applies to SSDEEP Digest Calculator.
  4. Compare hashes with the matching comparator operation. This applies to SSDEEP Digest Calculator.

Example

Input: Text input "alpha beta gamma" and a second sample "alpha beta delta" for a public comparison fixture. Algorithm operation: SSDEEP Digest Calculator.

Settings: SSDEEP Digest Calculator: Use text input for the short sample. Keep the algorithm format selected by the operation. Use the text output as a fuzzy-hash string.

Result: The operation returns a context-triggered piecewise hash that supports approximate similarity checks. The digest or checksum format is specific to SSDEEP Digest Calculator.

Limits

  • SSDEEP Digest Calculator: Fuzzy hashes support similarity checks, not exact identity.
  • SSDEEP Digest Calculator: Results vary with input size and changed regions.
  • SSDEEP Digest Calculator: They are unsuitable as password hashes or message-authentication codes.

Questions

What input does SSDEEP Digest Calculator accept?

SSDEEP Digest Calculator accepts text. SSDEEP is a program for computing context triggered piecewise hashes (CTPH). Also called fuzzy hashes, CTPH can match inputs that have homologies. Such inputs have sequences of identical bytes in the same order, although bytes in between these sequences may be different in both content and length. SSDEEP hashes are now widely used for simple identification purposes (e.g. the 'Basic Properties' section in VirusTotal). Although 'better' fuzzy hashes are available, SSDEEP is still one of the primary choices because of its speed and being a de facto standard. This operation is fundamentally the same as the CTPH operation, however their outputs differ in format.

Does SSDEEP Digest Calculator need extra settings?

SSDEEP Digest Calculator does not define extra operation settings. It uses its built-in behavior with the supplied input.

What does SSDEEP Digest Calculator return?

SSDEEP Digest Calculator returns text. SSDEEP is a program for computing context triggered piecewise hashes (CTPH). Also called fuzzy hashes, CTPH can match inputs that have homologies. Such inputs have sequences of identical bytes in the same order, although bytes in between these sequences may be different in both content and length. SSDEEP hashes are now widely used for simple identification purposes (e.g. the 'Basic Properties' section in VirusTotal). Although 'better' fuzzy hashes are available, SSDEEP is still one of the primary choices because of its speed and being a de facto standard. This operation is fundamentally the same as the CTPH operation, however their outputs differ in format.