https://github.com/glaslos/tlsh

TLSH lib in Golang
https://github.com/glaslos/tlsh

fuzzy hacktoberfest hashing locality-sensitive-hashing tlsh

Last synced: 5 days ago
JSON representation

TLSH lib in Golang

• Host: GitHub
• URL: https://github.com/glaslos/tlsh
• Owner: glaslos
• License: apache-2.0
• Created: 2017-04-03T13:55:46.000Z (over 7 years ago)
• Default Branch: main
• Last Pushed: 2022-12-12T22:30:21.000Z (almost 2 years ago)
• Last Synced: 2024-11-07T16:42:57.127Z (13 days ago)
• Topics: fuzzy, hacktoberfest, hashing, locality-sensitive-hashing, tlsh
• Language: Go
• Homepage:
• Size: 658 KB
• Stars: 135
• Watchers: 10
• Forks: 17
• Open Issues: 7
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
![Workflow](https://github.com/glaslos/ssdeep/actions/workflows/go.yml/badge.svg)

[![Go Report Card](https://goreportcard.com/badge/github.com/glaslos/tlsh)](https://goreportcard.com/report/github.com/glaslos/tlsh)

[![Go Reference](https://pkg.go.dev/badge/badge/glaslos/tlsh.svg)](https://pkg.go.dev/github.com/glaslos/tlsh)

# TLSH

Trend Micro Locality Sensitive Hash lib in Golang

Based on https://github.com/trendmicro/tlsh

See paper here: https://github.com/trendmicro/tlsh/blob/master/TLSH_CTC_final.pdf

TLSH is a fuzzy matching library. Given a byte stream with a minimum length of 256 bytes, TLSH generates a hash value which can be used for similarity comparisons. Similar objects will have similar hash values which allows for the detection of similar objects by comparing their hash values. Note that the byte stream should have a sufficient amount of complexity. For example, a byte stream of identical bytes will not generate a hash value.

The computed hash is 35 bytes long (output as 70 hexidecimal charactes). The first 3 bytes are used to capture the information about the file as a whole (length, ...), while the last 32 bytes are used to capture information about incremental parts of the file.