macOS
Homebrewverified · 100%
brew install ssdeeplocal Homebrew formula metadata
MacPortsverified · 94%
sudo port install ssdeepMacPorts ports tree · security/ssdeep/Portfile · source: api.github.com
brew
Install ssdeep with Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper
Recursive piecewise hashing tool. Version 2.14.1 via Homebrew; verified from local package data.
install
Additional install commands
Linux
Alpine Linux apkverified · 92%
sudo apk add libfuzzy2Alpine Linux edge package indexes · libfuzzy2 · source: dl-cdn.alpinelinux.org
Debian aptverified · 92%
sudo apt install libfuzzy-devDebian stable package indexes · libfuzzy-dev · source: deb.debian.org
Fedora dnfverified · 92%
sudo dnf install ssdeepFedora Rawhide package metadata · ssdeep · source: dl.fedoraproject.org
Nixverified · 92%
nix profile install nixpkgs#ssdeepnixpkgs package indexes · pkgs/by-name/ss/ssdeep/package.nix · source: api.github.com
Arch Linux pacmanverified · 92%
sudo pacman -S ssdeepArch Linux sync databases · ssdeep · source: geo.mirror.pkgbuild.com
openSUSE zypperverified · 92%
sudo zypper install libfuzzy-developenSUSE Tumbleweed package metadata · libfuzzy-devel · source: download.opensuse.org
overview
Package summary
Recursive piecewise hashing tool
Project links
Commands and aliases
- ssdeep
history
Project history and usage
ssdeep is a command-line fuzzy hashing tool and libfuzzy library for computing and comparing context-triggered piecewise hashes.
Project history
Jesse Kornblum introduced context-triggered piecewise hashing in the 2006 Digital Investigation/DFRWS paper 'Identifying Almost Identical Files Using Context Triggered Piecewise Hashing.' The ssdeep project documentation says the program was originally written by Kornblum and based on Andrew Tridgell's spamsum code.
The modern ssdeep project moved to GitHub under ssdeep-project in 2017. Its NEWS file records a line of 2.x releases adding signature comparison modes, API documentation, C++ compatibility, clustering, thread-safe fuzzy hashing, large-file/stdin support, and 2.14 performance optimizations.
Adoption history
The official ssdeep site lists packages for Ubuntu, Fedora, Debian, CentOS/EPEL, Arch Linux, FreeBSD, and Windows binaries. It also states that ssdeep hashes became widely used for simple identification, including VirusTotal basic properties, and that ssdeep remained a de facto standard despite newer fuzzy-hash alternatives.
How it is used
Package users run ssdeep to hash files, recursively hash directory trees, compare files against known signature sets, or compare signature files. Developers can link libfuzzy and call the fuzzy_hash_* and fuzzy_compare APIs.
Why package nerds care
ssdeep is a package-manager classic because it bridges command-line forensics and linkable library packaging. Distros often split it into runtime, library, and development packages, and security tooling frequently treats its output format as a lingua franca for quick similarity checks.
Timeline
- 2006: Kornblum's CTPH paper introduced the technique and proof-of-concept ssdeep program.
- 2010: ssdeep 2.5 added API documentation and C++ compatibility.
- 2013: ssdeep 2.10 rewrote the fuzzy hashing engine to be thread safe.
- 2017-06: ssdeep-project GitHub repository created.
- 2017-11: ssdeep 2.14.1 released.
Related projects
- Related tools and algorithms include spamsum, libfuzzy, TLSH, sdhash, VirusTotal similarity workflows, and digital-forensics hash-set tooling.
Sources
- https://api.github.com/repos/ssdeep-project/ssdeep
- https://dfrws.org/presentation/identifying-almost-identical-files-using-context-triggered-piecewise-hashing/
- https://raw.githubusercontent.com/ssdeep-project/ssdeep/master/NEWS
- https://ssdeep-project.github.io/ssdeep/index.html
- https://ssdeep-project.github.io/ssdeep/usage.html
security posture
Risk level: green
narrow executable package without higher-risk signals.
Risk classifier
green risk · low confidence · appliance
Why
- narrow executable package without higher-risk signals
Signals
- metadata:no-higher-risk-signals
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 10 platform targets.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
ssdeep | cli | global executable |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-07-08
manager version2.14.1
manager updated
local dataok
upstreamnot checked
latest detectednot detected
https://github.com/ssdeep-project/ssdeep
- infoNo package-manager update timestamp was available.low confidence
- infoNo cached GitHub release or tag data was available.https://github.com/ssdeep-project/ssdeepnone confidence
install metadata
Package metadata
| Package key | brew:ssdeep |
|---|---|
| Version | 2.14.1 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/ssdeep |
| Homepage | https://ssdeep-project.github.io/ssdeep/ |
| Repository | https://github.com/ssdeep-project/ssdeep |
| Upstream docs | https://github.com/ssdeep-project/ssdeep#readme |
| License | GPL-2.0-or-later |
| Source archive | https://github.com/ssdeep-project/ssdeep/releases/download/release-2.14.1/ssdeep-2.14.1.tar.gz |
| Bottle | available (on arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, monterey, sonoma, ventura, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | ssdeep |
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Debian apt95%
libfuzzy-dev 2.14.1+git20180629.57fcfff-3+b2
recursive piecewise hashing tool (development headers)
https://github.com/ssdeep-project/ssdeep
sudo apt install libfuzzy-dev- Section: libdevel
- Architecture: amd64
- Source Package: ssdeep
- 1 dependencies
- normalized package name match
- Matched by: Ssdeep
Debian apt95%
libfuzzy2 2.14.1+git20180629.57fcfff-3+b2
recursive piecewise hashing tool (library)
https://github.com/ssdeep-project/ssdeep
sudo apt install libfuzzy2- Section: libs
- Architecture: amd64
- Source Package: ssdeep
- 1 dependencies
- normalized package name match
- Matched by: Ssdeep
Debian apt95%
ssdeep 2.14.1+git20180629.57fcfff-3+b2
recursive piecewise hashing tool
https://github.com/ssdeep-project/ssdeep
sudo apt install ssdeep- Section: admin
- Architecture: amd64
- Source Package: ssdeep
- 3 dependencies
- normalized package name match
- Matched by: Ssdeep
Nix95%
ssdeep
nix profile install nixpkgs#ssdeep- normalized package name match
- Matched by: Ssdeep
Ubuntu apt95%
libfuzzy-dev 2.14.1+git20180629.57fcfff-3
recursive piecewise hashing tool (development headers)
https://github.com/ssdeep-project/ssdeep
sudo apt install libfuzzy-dev- Section: universe/libdevel
- Architecture: amd64
- Source Package: ssdeep
- 1 dependencies
- normalized package name match
- Matched by: Ssdeep
Ubuntu apt95%
libfuzzy2 2.14.1+git20180629.57fcfff-3
recursive piecewise hashing tool (library)
https://github.com/ssdeep-project/ssdeep
sudo apt install libfuzzy2- Section: universe/libs
- Architecture: amd64
- Source Package: ssdeep
- 1 dependencies
- normalized package name match
- Matched by: Ssdeep
Ubuntu apt95%
ssdeep 2.14.1+git20180629.57fcfff-3
recursive piecewise hashing tool
https://github.com/ssdeep-project/ssdeep
sudo apt install ssdeep- Section: universe/admin
- Architecture: amd64
- 3 dependencies
- normalized package name match
- Matched by: Ssdeep
apk95%
libfuzzy2 2.14.1-r2
Fuzzy hashing API and toolk
https://ssdeep-project.github.io/ssdeep/index.html
sudo apk add libfuzzy2- License: GPL-2.0-or-later
- Architecture: x86_64
- Source Package: ssdeep
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Ssdeep
apk95%
libfuzzy2-dev 2.14.1-r2
Fuzzy hashing API and toolk (development files)
https://ssdeep-project.github.io/ssdeep/index.html
sudo apk add libfuzzy2-dev- License: GPL-2.0-or-later
- Architecture: x86_64
- Source Package: ssdeep
- 1 dependencies
- normalized package name match
- Matched by: Ssdeep
apk95%
ssdeep 2.14.1-r2
Fuzzy hashing API and toolk
https://ssdeep-project.github.io/ssdeep/index.html
sudo apk add ssdeep- License: GPL-2.0-or-later
- Architecture: x86_64
- Source Package: ssdeep
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Ssdeep
apk95%
ssdeep-doc 2.14.1-r2
Fuzzy hashing API and toolk (documentation)
https://ssdeep-project.github.io/ssdeep/index.html
sudo apk add ssdeep-doc- License: GPL-2.0-or-later
- Architecture: x86_64
- Source Package: ssdeep
- normalized package name match
- Matched by: Ssdeep
apk95%
ssdeep-static 2.14.1-r2
Fuzzy hashing API and toolk (static library)
https://ssdeep-project.github.io/ssdeep/index.html
sudo apk add ssdeep-static- License: GPL-2.0-or-later
- Architecture: x86_64
- Source Package: ssdeep
- normalized package name match
- Matched by: Ssdeep
dnf95%
ssdeep 2.14.1-22.fc44
Compute context triggered piecewise hashes
https://ssdeep-project.github.io/ssdeep/
sudo dnf install ssdeep- License: GPL-2.0-or-later
- Category: Unspecified
- Architecture: x86_64
- Source Package: ssdeep
- 6 dependencies
- 1 provides
- normalized package name match
- Matched by: Ssdeep
dnf95%
ssdeep-devel 2.14.1-22.fc44
Development files for libfuzzy
https://ssdeep-project.github.io/ssdeep/
sudo dnf install ssdeep-devel- License: GPL-2.0-or-later
- Category: Unspecified
- Architecture: i686
- Source Package: ssdeep
- 2 dependencies
- 1 provides
- normalized package name match
- Matched by: Ssdeep
dnf95%
ssdeep-libs 2.14.1-22.fc44
Runtime libfuzzy library
https://ssdeep-project.github.io/ssdeep/
sudo dnf install ssdeep-libs- License: GPL-2.0-or-later
- Category: Unspecified
- Architecture: i686
- Source Package: ssdeep
- 2 dependencies
- 2 provides
- normalized package name match
- Matched by: Ssdeep
pacman95%
ssdeep 2.14.1-5
A program for computing context triggered piecewise hashes
https://ssdeep-project.github.io/ssdeep/
sudo pacman -S ssdeep- License: GPL-2.0-or-later
- Architecture: x86_64
- 2 dependencies
- normalized package name match
- Matched by: Ssdeep
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment