Skip to main content

This is a pure-Python library for computing context triggered piecewise hashes (CTPH), also called fuzzy hashes, or often ssdeep after the name of a popular tool. At a very high level, fuzzy hashing is a way to determine whether two inputs are similar, rather than identical. Fuzzy hashes are widely adopted in digital forensics and malware detection.

This implementation is based on SpamSum by Dr. Andrew Tridgell.

Usage

To compute a fuzzy hash, simply use hash() function:

` >>> import ppdeep >>> h1 = ppdeep.hash('The equivalence of mass and energy translates into the well-known E = mc²') >>> h1 '3:RC0qYX4LBFA0dxEq4z2LRK+oCKI9VnXn:RvqpLB60dx8ilK+owX' >>> h2 = ppdeep.hash('The equivalence of mass and energy translates into the well-known E = MC2') >>> h2 '3:RC0qYX4LBFA0dxEq4z2LRK+oCKI99:RvqpLB60dx8ilK+oA' `

To calculate level of similarity, use compare() function which returns an integer value from 0 to 100 (full match):

` >>> ppdeep.compare(h1, h2) 29 `

Function hash_from_file() accepts a filename as argument and calculates the hash of the contents of the file:

` >>> ppdeep.hash_from_file('.bash_history') '1536:EXM36dG36x3KW732vOAcg3EP1qKlKozcK0z5G+lEPTssl/7eO7HOBF:tKlKozcWT0' `

Installation

` $ pip install ppdeep `

If you want to use the latest version of the code, you can install it from Git:

` $ git clone https://github.com/elceef/ppdeep.git $ cd ppdeep $ pip install . `

Metadata

Release files for ppdeep 20200505

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for ppdeep 20200505
File Size Uploaded
ppdeep-20200505.tar.gz 4.3 kB Details

Built distribution (wheel)

Table of built distributions (wheels) for ppdeep 20200505
File Interpreter ABI Platform
ppdeep-20200505-py3-none-any.whl Python 3 none any Details

Total release size: 8.9 kB

Release files / ppdeep-20200505.tar.gz

Download URL ppdeep-20200505.tar.gz
Size 4.3 kB
Tags Source
SHA-256 checksum
How to use checksums
acc74bb902e6d21b03d39aed740597093c6562185bfe06da9b5272e01c80a1ff
BLAKE2b-256 checksum
How to use checksums
64adca722788606970d227b1778c158d4a04ffd8190487fa80b3273e3fa587ac
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/1.13.0 pkginfo/1.4.2 requests/2.21.0 setuptools/41.1.0 requests-toolbelt/0.8.0 tqdm/4.30.0 CPython/3.7.5

Release files / ppdeep-20200505-py3-none-any.whl

Download URL ppdeep-20200505-py3-none-any.whl
Size 4.6 kB
Tags Python 3
SHA-256 checksum
How to use checksums
0335063cc96edfb2f90f546a5812c4a47d122dc7bd764b3eef48303d2bf41939
BLAKE2b-256 checksum
How to use checksums
a188f652889bc15f3faa9fd973cfa652098dfcfdd6fca6de63bbe1a418734ddb
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/1.13.0 pkginfo/1.4.2 requests/2.21.0 setuptools/41.1.0 requests-toolbelt/0.8.0 tqdm/4.30.0 CPython/3.7.5

Release history Release notifications | RSS feed

This release

20200505 This release

2 release files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page