macOS
Homebrewverifiziert · 100%
brew install sha1dclocal Homebrew formula metadata
brew / Rang 20096
sha1dc mit Homebrew installieren
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für sha1dc in AI-Agent-Workflows.
Installation
Weitere Installationsbefehle
Überblick
Paketzusammenfassung
Tool to detect SHA-1 collisions in files, including SHAttered
Projektlinks
Befehle und Aliase
- sha1dcsum
- sha1dcsum_partialcoll
Verlauf
Projektgeschichte und Nutzung
SHA-1 Collision Detection is an MIT-licensed C library and command-line tool by Marc Stevens and Dan Shumow. It computes SHA-1 digests while detecting files produced with known cryptanalytic SHA-1 collision techniques.
Projektgeschichte
Marc Stevens and Dan Shumow published the implementation in 2017 in the context of practical SHA-1 collision attacks. Its detection method builds on Stevens's counter-cryptanalysis research and explicitly recognizes files produced by attacks such as SHAttered; later support also references SHA-mbles.
Adoptionsgeschichte
The project was designed as a near drop-in replacement for common SHA-1 implementations and sha1sum, lowering the cost of adding collision detection to existing software. The input confirms packaging as the Homebrew formula sha1dc.
Wie es verwendet wird
sha1dcsum hashes files and warns when a full SHA-1 collision attack is detected; sha1dcsum_partialcoll also checks reduced-round collision examples. Developers can integrate the library through its SHA1DC API and use safe-hash mode so colliding inputs receive different defensive hashes.
Warum Paket-Nerds sich dafür interessieren
sha1dc lets package and release engineers continue verifying legacy SHA-1 material while detecting known cryptanalytic collision constructions. It is particularly relevant to archives and software-distribution systems that cannot immediately remove every SHA-1 dependency.
Zeitleiste
- 2013: Marc Stevens published the counter-cryptanalysis research cited by the project.
- 2017: Project copyright begins and the SHAttered collision became a principal real-world test case.
- Later: The official documentation added reference to detection of attacks derived from SHA-mbles.
Related projects
- The official README relates the tool to ordinary SHA-1 libraries and sha1sum, the SHAttered collision demonstration, SHA-mbles, and Marc Stevens's counter-cryptanalysis research.
Quellen
- Official library header: https://github.com/cr-marcstevens/sha1collisiondetection/blob/master/lib/sha1.h
- Official repository and README: https://github.com/cr-marcstevens/sha1collisiondetection
- input.source_facts.package-manager
Sicherheitslage
Risikostufe: grün
narrow executable package without higher-risk signals.
Risikoklassifikator
grün Risiko · niedrig Konfidenz · appliance
Warum
- narrow executable package without higher-risk signals
Signale
- metadata:no-higher-risk-signals
Installationsverhalten
- In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
- Homebrew-Bottle-Metadaten sind für 12 Plattformziele verfügbar.
- Build-Metadaten listen 2 Build-Abhängigkeiten.
Empfohlene Prüfung
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
Executables
Installierte Executables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
sha1dcsum | cli | globales Executable | |
sha1dcsum_partialcoll | cli | globales Executable |
Aktualität
Version und Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
Seite generiert2026-09-19
Manager-Version1.0.3
Manager aktualisiert2026-09-14
lokale DatenOK
Upstreamnot checked
neueste erkannte Versionnicht erkannt
https://github.com/cr-marcstevens/sha1collisiondetection
- InfoNo cached GitHub release or tag data was available.https://github.com/cr-marcstevens/sha1collisiondetectionnone Konfidenz
Installationsmetadaten
Paketmetadaten
| Paketschlüssel | brew:sha1dc |
|---|---|
| Version | 1.0.3 |
| Paketmanager | Homebrew |
| Paketmanager-Seite | https://formulae.brew.sh/formula/sha1dc |
| Homepage | https://github.com/cr-marcstevens/sha1collisiondetection |
| Repository | https://github.com/cr-marcstevens/sha1collisiondetection |
| Lizenz | MIT |
| Quellarchiv | https://github.com/cr-marcstevens/sha1collisiondetection/archive/refs/tags/stable-v1.0.3.tar.gz |
| Zuletzt aktualisiert | 2026-09-14T12:20:13+02:00 |
| Pulse | updated |
| Build-Abhängigkeiten | coreutils, libtool |
| Bottle | verfügbar (auf arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, monterey, sonoma, ventura, x86_64_linux) |
| Homebrew post-install | nicht definiert |
| Dienst | keiner deklariert |
Registry-Fakten
Details aus der Quelldatenbank
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | sha1dc |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
Quellspur
Aus Repository-Daten generiert
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
Combined YAML source
View the package source record on GitHub.
Verwendete Quellen
- Geiger risk classifier
- cross-ecosystem install command graph
- curated package history
- package relationship graph
- package version freshness
- package-page enrichment
- pkg.so package database
- pkgdb category and tag curation