blazehash 0.2.3

Forensic file hasher — hashdeep for the modern era, BLAKE3 by default
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

use super::NsrlResult;
use anyhow::Result;
use rusqlite::{params, Connection, OpenFlags};
use std::path::Path;

pub struct SqliteNsrl {
    conn: Connection,
}

impl SqliteNsrl {
    pub fn open(path: &Path) -> Result<Self> {
        let conn = Connection::open_with_flags(
            path,
            OpenFlags::SQLITE_OPEN_READ_ONLY | OpenFlags::SQLITE_OPEN_NO_MUTEX,
        )?;
        Ok(SqliteNsrl { conn })
    }

    pub fn lookup(&self, hash: &str) -> NsrlResult {
        let hash_upper = hash.to_uppercase();
        let exists: bool = self
            .conn
            .prepare_cached(
                "SELECT 1 FROM FILE WHERE UPPER(SHA256) = ?1 OR UPPER(MD5) = ?1 LIMIT 1",
            )
            .and_then(|mut s| s.exists(params![hash_upper]))
            .unwrap_or(false);
        if exists {
            NsrlResult::KnownGood
        } else {
            NsrlResult::Unknown
        }
    }
}