# Install ssdeep with Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper Recursive piecewise hashing tool. Version 2.14.1 via Homebrew; verified from local package data. ## Install ```sh sudo av install brew:ssdeep ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install ssdeep ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install ssdeep ``` Evidence: MacPorts ports tree: security/ssdeep/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add libfuzzy2 ``` Evidence: Alpine Linux edge package indexes: libfuzzy2 from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install libfuzzy-dev ``` Evidence: Debian stable package indexes: libfuzzy-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install ssdeep ``` Evidence: Fedora Rawhide package metadata: ssdeep from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#ssdeep ``` Evidence: nixpkgs package indexes: pkgs/by-name/ss/ssdeep/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S ssdeep ``` Evidence: Arch Linux sync databases: ssdeep from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install libfuzzy-devel ``` Evidence: openSUSE Tumbleweed package metadata: libfuzzy-devel from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst ## Package facts - **Package key:** brew:ssdeep - **Package manager:** Homebrew - **Package manager page:** - **Version:** 2.14.1 - **Source summary:** Recursive piecewise hashing tool - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** GPL-2.0-or-later - **Source archive:** - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - ssdeep (cli) - ssdeep (alias) ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, monterey, sonoma, ventura, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 2.14.1 - Local data: ok - Upstream repository: https://github.com/ssdeep-project/ssdeep - info: No package-manager update timestamp was available. - info: No cached GitHub release or tag data was available. ## Project history and usage ssdeep is a command-line fuzzy hashing tool and libfuzzy library for computing and comparing context-triggered piecewise hashes. ### Project history Jesse Kornblum introduced context-triggered piecewise hashing in the 2006 Digital Investigation/DFRWS paper 'Identifying Almost Identical Files Using Context Triggered Piecewise Hashing.' The ssdeep project documentation says the program was originally written by Kornblum and based on Andrew Tridgell's spamsum code. The modern ssdeep project moved to GitHub under ssdeep-project in 2017. Its NEWS file records a line of 2.x releases adding signature comparison modes, API documentation, C++ compatibility, clustering, thread-safe fuzzy hashing, large-file/stdin support, and 2.14 performance optimizations. ### Adoption history The official ssdeep site lists packages for Ubuntu, Fedora, Debian, CentOS/EPEL, Arch Linux, FreeBSD, and Windows binaries. It also states that ssdeep hashes became widely used for simple identification, including VirusTotal basic properties, and that ssdeep remained a de facto standard despite newer fuzzy-hash alternatives. ### How it is used Package users run ssdeep to hash files, recursively hash directory trees, compare files against known signature sets, or compare signature files. Developers can link libfuzzy and call the fuzzy_hash_* and fuzzy_compare APIs. ### Why package nerds care ssdeep is a package-manager classic because it bridges command-line forensics and linkable library packaging. Distros often split it into runtime, library, and development packages, and security tooling frequently treats its output format as a lingua franca for quick similarity checks. ### Timeline - 2006: Kornblum's CTPH paper introduced the technique and proof-of-concept ssdeep program. - 2010: ssdeep 2.5 added API documentation and C++ compatibility. - 2013: ssdeep 2.10 rewrote the fuzzy hashing engine to be thread safe. - 2017-06: ssdeep-project GitHub repository created. - 2017-11: ssdeep 2.14.1 released. ### Related projects - Related tools and algorithms include spamsum, libfuzzy, TLSH, sdhash, VirusTotal similarity workflows, and digital-forensics hash-set tooling. ### Sources - - - - - ## Security Notes narrow executable package without higher-risk signals. - **Geiger risk:** green / low - narrow executable package without higher-risk signals ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** ssdeep - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## Other Package-Manager Records - Debian apt - libfuzzy-dev - 2.14.1+git20180629.57fcfff-3+b2: normalized package name match | Debian stable package indexes: libfuzzy-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | recursive piecewise hashing tool (development headers) | https://github.com/ssdeep-project/ssdeep - Debian apt - libfuzzy2 - 2.14.1+git20180629.57fcfff-3+b2: normalized package name match | Debian stable package indexes: libfuzzy2 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | recursive piecewise hashing tool (library) | https://github.com/ssdeep-project/ssdeep - Debian apt - ssdeep - 2.14.1+git20180629.57fcfff-3+b2: normalized package name match | Debian stable package indexes: ssdeep from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | recursive piecewise hashing tool | https://github.com/ssdeep-project/ssdeep - Nix - ssdeep: normalized package name match | nixpkgs package indexes: pkgs/by-name/ss/ssdeep/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - libfuzzy-dev - 2.14.1+git20180629.57fcfff-3: normalized package name match | Ubuntu 24.04 LTS package indexes: libfuzzy-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | recursive piecewise hashing tool (development headers) | https://github.com/ssdeep-project/ssdeep - Ubuntu apt - libfuzzy2 - 2.14.1+git20180629.57fcfff-3: normalized package name match | Ubuntu 24.04 LTS package indexes: libfuzzy2 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | recursive piecewise hashing tool (library) | https://github.com/ssdeep-project/ssdeep - Ubuntu apt - ssdeep - 2.14.1+git20180629.57fcfff-3: normalized package name match | Ubuntu 24.04 LTS package indexes: ssdeep from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | recursive piecewise hashing tool | https://github.com/ssdeep-project/ssdeep - apk - libfuzzy2 - 2.14.1-r2: normalized package name match | Alpine Linux edge package indexes: libfuzzy2 from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Fuzzy hashing API and toolk | https://ssdeep-project.github.io/ssdeep/index.html - apk - libfuzzy2-dev - 2.14.1-r2: normalized package name match | Alpine Linux edge package indexes: libfuzzy2-dev from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Fuzzy hashing API and toolk (development files) | https://ssdeep-project.github.io/ssdeep/index.html - apk - ssdeep - 2.14.1-r2: normalized package name match | Alpine Linux edge package indexes: ssdeep from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Fuzzy hashing API and toolk | https://ssdeep-project.github.io/ssdeep/index.html - apk - ssdeep-doc - 2.14.1-r2: normalized package name match | Alpine Linux edge package indexes: ssdeep-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Fuzzy hashing API and toolk (documentation) | https://ssdeep-project.github.io/ssdeep/index.html - apk - ssdeep-static - 2.14.1-r2: normalized package name match | Alpine Linux edge package indexes: ssdeep-static from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Fuzzy hashing API and toolk (static library) | https://ssdeep-project.github.io/ssdeep/index.html - dnf - ssdeep - 2.14.1-22.fc44: normalized package name match | Fedora Rawhide package metadata: ssdeep from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Compute context triggered piecewise hashes | https://ssdeep-project.github.io/ssdeep/ - dnf - ssdeep-devel - 2.14.1-22.fc44: normalized package name match | Fedora Rawhide package metadata: ssdeep-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Development files for libfuzzy | https://ssdeep-project.github.io/ssdeep/ - dnf - ssdeep-libs - 2.14.1-22.fc44: normalized package name match | Fedora Rawhide package metadata: ssdeep-libs from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Runtime libfuzzy library | https://ssdeep-project.github.io/ssdeep/ - pacman - ssdeep - 2.14.1-5: normalized package name match | Arch Linux sync databases: ssdeep from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | A program for computing context triggered piecewise hashes | https://ssdeep-project.github.io/ssdeep/ ## Related links - [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://www.automicvault.com/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [dnstwist](https://www.automicvault.com/pkg/brew/dnstwist/) - Popular package that depends on this formula. - [afflib](https://www.automicvault.com/pkg/brew/afflib/) - Shares av.db curated category or tags: cli, forensics, security. - [chainsaw](https://www.automicvault.com/pkg/brew/chainsaw/) - Shares av.db curated category or tags: cli, forensics, security. - [dc3dd](https://www.automicvault.com/pkg/brew/dc3dd/) - Shares av.db curated category or tags: cli, forensics, hashing, security. - [dcfldd](https://www.automicvault.com/pkg/brew/dcfldd/) - Shares av.db curated category or tags: cli, forensics, security. - [evtx](https://www.automicvault.com/pkg/brew/evtx/) - Shares av.db curated category or tags: cli, forensics, security. - [hack-browser-data](https://www.automicvault.com/pkg/brew/hack-browser-data/) - Shares av.db curated category or tags: cli, forensics, security. - [mac-robber](https://www.automicvault.com/pkg/brew/mac-robber/) - Shares av.db curated category or tags: cli, forensics, security. - [rhash](https://www.automicvault.com/pkg/brew/rhash/) - Shares av.db curated category or tags: cli, hashing, security. ## Combined YAML source View the package source record on GitHub. [combined/ssdeep.yml](https://github.com/automic-vault/db/blob/main/combined/ssdeep.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph