Compare SSDEEP hashes

Category: Hashing

Status: Registered and callable in the CyberChef 11.3.0 compatibility inventory.

Input / output: string → Number

Background: https://forensics.wiki/ssdeep/

What it does

Compares two SSDEEP fuzzy hashes to determine the similarity between them on a scale of 0 to 100.

Note

Status here means the operation name is implemented and callable. It does not by itself promise byte-for-byte parity for every upstream option. See Compatibility and current status for the verified scope and known boundaries.

Arguments and options

Arguments are positional. Keep their order when using bake() or Pipeline.then().

Index	Name	UI type	PyChef default	Accepted values / format
`0`	Delimiter	`option`	`'Line feed'`	`'Line feed'`, `'CRLF'`, `'Space'`, `'Comma'`

Recipe template

Important

This is a call template built from the documented defaults. Replace placeholder values such as empty keys, paths, patterns, or lookup data before running it.

from pychef import bake

input_value = "example"
args = ['Line feed']
result = bake(input_value, [{"op": 'Compare SSDEEP hashes', "args": args}])
print(result)

Pipeline example

from pychef import Pipeline

args = ['Line feed']
transform = Pipeline().then('Compare SSDEEP hashes', *args)
result = transform("example")

Dedicated operation module

The registered entry point lives in pychef.operations.by_operation.compare_ssdeep_hashes. Direct calls receive the input value and a positional argument tuple:

from pychef.operations.by_operation.compare_ssdeep_hashes import run

result = run("example", tuple(['Line feed']))

pychef.operations.by_operation.compare_ssdeep_hashes.run(value, args)

Run this operation using its shared internal implementation.

Parameters:

value (str | bytes)
args (Sequence[Any])

Return type:

str | bytes