Automic VaultAutomic Vault

brew

hashcash を Homebrew, apk, apt, Nix でインストール

hashcash のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

インストール

追加のインストールコマンド

macOS

Homebrew確認済み · 100%
brew install hashcash

local Homebrew formula metadata

Linux

Alpine Linux apk確認済み · 92%
sudo apk add hashcash

Alpine Linux edge package indexes · hashcash · ソース: dl-cdn.alpinelinux.org

Debian apt確認済み · 92%
sudo apt install hashcash

Debian stable package indexes · hashcash · ソース: deb.debian.org

Nix確認済み · 92%
nix profile install nixpkgs#hashcash

nixpkgs package indexes · pkgs/by-name/ha/hashcash/package.nix · ソース: api.github.com

概要

パッケージ概要

Proof-of-work algorithm to counter denial-of-service (DoS) attacks

コマンドとエイリアス

  • hashcash
  • sha1

履歴

プロジェクトの歴史と使われ方

Hashcash is Adam Back's proof-of-work scheme for making a sender spend CPU time before a receiver accepts a message or request. The Homebrew package installs the command-line tool that mints and verifies Hashcash stamps, but the package is historically important because the algorithm became one of the canonical proof-of-work designs referenced by later anti-abuse and cryptocurrency systems.

プロジェクトの歴史

Hashcash was invented by Adam Back in 1997 as a denial-of-service and anti-spam countermeasure. The basic idea was to attach a stamp to a message; the sender expends adjustable computational work to mint the stamp, while the recipient can verify it cheaply. The official site describes both the algorithm and the email tool as `hashcash`, which is why the package combines a security idea with a concrete Unix-style command.

The command-line documentation presents the package as a tool for minting stamps, checking stamps, estimating work, purging spent-stamp databases, counting partial preimage bits, and extracting resource names. The implementation used SHA1 partial preimages for version-1 stamps, with an adjustable bit target and a receiver-side database option for double-spend protection.

採用の歴史

Hashcash's first adoption story was email anti-spam: senders could attach X-Hashcash headers and receivers could treat valid stamps as a whitelisting signal. The official docs describe a default email validity window and a database of spent stamps to stop reuse.

The larger adoption story came later through Bitcoin. Hashcash.org explicitly describes Hashcash as the mining function used in Bitcoin, while also explaining the differences: Bitcoin uses SHA-256 rather than SHA1, double hashing, and a more finely adjusted network difficulty. That made Hashcash a bridge between cypherpunk anti-spam tools and package-manager-visible cryptocurrency infrastructure.

使われ方

The `hashcash` executable can mint stamps with `-m`, check them with `-c`, estimate work with `-s`, purge spent-stamp databases with `-p`, and count proof bits with `-w`. In email use, the resource is typically a recipient address, and the stamp can be placed in an X-Hashcash header.

The package is also useful as a reference implementation. The official site notes that the algorithm is simple enough to implement from scratch with a hash library and that verification can be understood as counting leading zero bits in a hash output.

パッケージ好きにとっての重要性

Hashcash is one of those packages whose code footprint is much smaller than its historical footprint. It is a command-line tool for an old anti-spam mechanism, but it also preserves a concrete implementation of proof-of-work in the Unix package ecosystem.

For package nerds, Hashcash matters because it connects mail-era anti-abuse tooling, command-line cryptographic utilities, source tarballs rather than modern hosted repos, and the intellectual lineage of Bitcoin mining. Its Homebrew formula keeps a small historical security tool installable long after its original email-spam use case stopped being mainstream.

タイムライン

  • 1997: Adam Back invents Hashcash as a proof-of-work anti-spam and denial-of-service countermeasure.
  • 2002: The Hashcash denial-of-service countermeasure paper is published as a technical report.
  • 2004: Hashcash 1.02 code and the version-1 stamp format are described in the official developer notes and man page.
  • 2009: Bitcoin launches using a Hashcash-style proof-of-work mining function with SHA-256 and network difficulty adjustment.
  • 2013: Hashcash.org's Bitcoin notes compare Bitcoin difficulty with Hashcash bit difficulty and explain the conceptual relationship.

Related projects

  • Bitcoin uses a Hashcash-style mining function with SHA-256 and dynamic difficulty.
  • RPOW is discussed by Hashcash.org as an earlier reusable proof-of-work system in the same design family.
  • Email anti-spam systems and X-Hashcash headers are the original deployment target for the command-line tool.

ソース

  • Official Hashcash home page, man page, developer notes, source page, and Bitcoin comparison page.

セキュリティ状態

リスクレベル: グリーン

narrow executable package without higher-risk signals.

リスク分類器

リスク グリーン · 信頼度 低 · appliance

理由

  • narrow executable package without higher-risk signals

信号

  • metadata:no-higher-risk-signals

インストール挙動

  • formula メタデータに Homebrew post-install フックは記録されていません。
  • Homebrew bottle メタデータは 6 個のプラットフォームターゲットで利用できます。
  • 1 件の実行時依存関係とともにインストールされます。

推奨レビュー

エージェントに無人実行させる前に、このツールが平文の認証情報を読むか、リモート状態を書き込むか、成果物を公開するか、プラグインを起動するかを確認してください。

実行可能ファイル

インストールされる実行可能ファイル

コマンド種類公開範囲メモ
hashcashcliグローバル実行可能ファイル
sha1cliグローバル実行可能ファイル

鮮度

バージョンと鮮度

これらの信号は、ページ生成時期、パッケージマネージャの活動、上流リリース比較を分けて示します。バージョン遅れは、証拠 URL と比較可能なバージョンがある場合だけ警告されます。

ページ生成日2026-07-08
マネージャ版1.22
マネージャ更新日2026-06-22
ローカルデータOK
上流not checked
検出された最新未検出

http://hashcash.org

  • 情報Release/tag comparison is only available for GitHub repositories.http://hashcash.org信頼度 none

インストールメタデータ

パッケージメタデータ

パッケージキーbrew:hashcash
バージョン1.22
パッケージマネージャHomebrew
パッケージマネージャページhttps://formulae.brew.sh/formula/hashcash
ホームページhttp://hashcash.org
上流ドキュメントhttp://www.hashcash.org/docs/hashcash.html
ライセンスLicenseRef-Homebrew-public-domain OR BSD-3-Clause OR LGPL-2.1-only OR GPL-2.0-only
ソースアーカイブhttps://deb.debian.org/debian/pool/main/h/hashcash/hashcash_1.22.orig.tar.gz
最終更新2026-06-22T14:03:42-07:00
Pulseupdated
依存関係openssl@4
Bottle利用可能 (対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install未定義
サービス宣言なし

レジストリ情報

ソースデータベース詳細

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namehashcash
Version Scheme0
Revision2
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

ソースデータベース一致

他のパッケージマネージャ記録

一致は外部パッケージマネージャインデックスから取得され、ローカルの Automic Vault パッケージリンクとは分けて表示されます。

Debian apt95%

hashcash 1.22-2

postage payment scheme for email based on hash calculations

http://hashcash.org/

sudo apt install hashcash
  • Section: mail
  • Architecture: amd64
  • 1 依存関係
  • normalized package name match
  • 一致条件: Hashcash
Debian stable package indexes · deb.debian.org · Debian stable package indexes: hashcash from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

hashcash

nix profile install nixpkgs#hashcash
  • normalized package name match
  • 一致条件: Hashcash
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ha/hashcash/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

hashcash 1.22-1

postage payment scheme for email based on hash calculations

http://hashcash.org/

sudo apt install hashcash
  • Section: universe/mail
  • Architecture: amd64
  • 1 依存関係
  • normalized package name match
  • 一致条件: Hashcash
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: hashcash from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

hashcash 1.22-r0

Proof-of-work algorithm for denial-of-service counter measures

http://www.hashcash.org/

sudo apk add hashcash
  • License: Public-Domain
  • Architecture: x86_64
  • Source Package: hashcash
  • 1 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Hashcash
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: hashcash from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

hashcash-doc 1.22-r0

Proof-of-work algorithm for denial-of-service counter measures (documentation)

http://www.hashcash.org/

sudo apk add hashcash-doc
  • License: Public-Domain
  • Architecture: x86_64
  • Source Package: hashcash
  • normalized package name match
  • 一致条件: Hashcash
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: hashcash-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

ソース経路

リポジトリデータから生成

このページは scripts/generate-pkg-sqlite.py が生成した非公開のパッケージ SQLite アーティファクトから av-web によって提供されます。

使用ソース

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment