Type Definition ssdeep::FuzzyHash

source · 
pub type FuzzyHash = FuzzyHashData<{ BlockHash::FULL_SIZE }, { BlockHash::HALF_SIZE }, true>;
Expand description

Regular (truncated) normalized fuzzy hash type.

This type has a short (truncated) and normalized form so this type is the best fit for fuzzy hash comparison.

See also: FuzzyHashData

Alternative Types

This type does not preserve the original contents of the input fuzzy hash. If you want to…

  1. Preserve the original string representation of the fuzzy hash (when parsing existing fuzzy hashes) or
  2. Retrieve a fuzzy hash generated by Generator (not normalized by default ssdeep),

use a raw form, RawFuzzyHash.

Usually, all fuzzy hashes you would handle are truncated, meaning the second half of two block hashes are truncated to the half size of the maximum size of the first half. But if you pass the FUZZY_FLAG_NOTRUNC flag to the fuzzy_digest function (libfuzzy), the result will be a non-truncated, long form. If you want to handle such fuzzy hashes, use LongFuzzyHash (instead of FuzzyHash) and/or LongRawFuzzyHash (instead of RawFuzzyHash).