README
¶
TLSH
Trend Micro Locality Sensitive Hash lib in Golang
Based on https://github.com/trendmicro/tlsh
See paper here: https://github.com/trendmicro/tlsh/blob/master/TLSH_CTC_final.pdf
TLSH is a fuzzy matching library. Given a byte stream with a minimum length of 256 bytes, TLSH generates a hash value which can be used for similarity comparisons. Similar objects will have similar hash values which allows for the detection of similar objects by comparing their hash values. Note that the byte stream should have a sufficient amount of complexity. For example, a byte stream of identical bytes will not generate a hash value.
The computed hash is 35 bytes long (output as 70 hexidecimal charactes). The first 3 bytes are used to capture the information about the file as a whole (length, ...), while the last 32 bytes are used to capture information about incremental parts of the file.
Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func DiffFilenames ¶ added in v0.2.0
DiffFilenames calculate distance between two files
Types ¶
type FuzzyReader ¶ added in v0.2.0
type FuzzyReader interface {
io.Reader
io.ByteReader
}
FuzzyReader interface
type TLSH ¶ added in v0.3.0
type TLSH struct {
// contains filtered or unexported fields
}
TLSH holds hash components
func HashFilename ¶ added in v0.2.0
HashFilename calculates the TLSH for the input file
func HashReader ¶
func HashReader(r FuzzyReader) (*TLSH, error)
HashReader calculates the TLSH for the input reader
func ParseStringToTlsh ¶ added in v0.3.0
Parsing the hash of the string type
Source Files
Directories