forked from jessek/hashdeep
-
Notifications
You must be signed in to change notification settings - Fork 0
/
TODO
83 lines (75 loc) · 4.01 KB
/
TODO
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
Because I kept ignoring this list of TODO items, I have
moved them all to the SourceForge Feature Request Tracker.
See https://sourceforge.net/tracker/?group_id=67079&atid=516781
for all current TODO items.
October 9, 2011 status report:
md5deep/hashdeep:
* the same code base
* completely rewritten in C++
* multi-threaded (-j4 runs 4 worker threads and one primary thread).
- default is 1 worker per CPU.
- specify 0 workers to turn off multi-threading
* each worker opens the files
* Compiles for windows32 and windows64 using mingw on Fedora Core 15
* Full regression testing operational. All known features are now testable and tested.
* -hh now prints more help
Here's future stuff to do:
* Performance tuning:
1 - don't create hash_hex strings for algorithms we don't use.
2 - Currently hashlist is a multimap. It might be better to make it
a tr1::unordered_set, but that would require having the buckets be
vectors, since a single hash can have more than one file attached to it.
* Style:
- Currently hashlist is a subclass of a multimap; it should be an opaque object that
* Nice graphs showing peformance and speedup.
* Test with actual hash collisions of files that have same MD5 but different SHA1
* Add a file pattern option that specifies what files are to be hashed.
* Improve usage for -hh prints ALL options.
* Memory mapped files:
- Figure out why memory-mapped files are slower than unbuffered io.
1- memory-mapped files can generate a SIGSEGV or SIGBUS if the mapped region is not available.
http://linux.die.net/man/2/mmap
This needs to be explicitly handled with a signal handler.
2-Memory mapped files can be handled on WIndows.
- Until we get this, memory-mapped files are off by default.
* Should have a better startegy for "Known file not used" in audit_check, because I don't want to modify the map.
==
Below is a list of what Simson Garfinkel did to bring hashdeep and md5deep from version 3 to version 4:
1 - Start with a new copy of the source
2 - fixed the autoconf files.
3 - migrated to C++ (hashdeep is now hashdeep.cpp)
4 - add DFXML to the multihash program.
5 - added an output mode to the multihash program that exactly matches
the output mode of the single hash md5deep, sha1deep, etc. This was
done by using md5deep's output functions directly.
6 - added a mode to the multihash program that exactly matches the
command-line options, and have that mode be the default when the
command name changes. This was done by using md5deep's command line
parser.
7 - changed state to a C++ class.
8 - Remove the current_file stuff from state to create another C++ class.
9 - Modified hash() function take the file being hashed and a place to put it.
10 - Start replacing char * arrays with stl::string. Consider replacing TCHAR strings with vector<TCHAR>.
11 - Remove hashtable object for the STL map
12 - migrate all hash databases to a single class (hashlist.cpp)
13 - Fixed -k so that it loads into that database
14 - Fix audit mode so that it reads from that database.
15 - Loading hashes should return a string with the set of hashes that were added.
16 - Went through entire program looking for dead code.
17 - migrated to multi-threaded producer/consumer architecture with
the file searching (dig) being the producer and hash() being the
consumer. (This code was taken from bulk_extractor)
18 - Add "-j" option to control how many threads; -j0 turns off threading.
19 - Made error printing is threadsafe
20 - Remove the file_name_annotation and instead explicitly remembered
the piecewise start and stop.
21 - Figured out why threading turns on piecewise problem. Turns out
that the SHA1 implementation was not threadsafe; replaced it with a
different one.
22 - got hashlist matching working again
23 - Added support for common crypto functions on mac. This makes SHA1
and SHA256 go dramatically faster.
================
Remaining:
* - Change all codes to UTF8 in all modes of operation
* - Option to include BOM in plain text output mode.