pkg.soopen package index

brew / 排名 20096

使用 Homebrew 安装 sha1dc

查看 sha1dc 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install sha1dc

local Homebrew formula metadata

概览

软件包摘要

Tool to detect SHA-1 collisions in files, including SHAttered

命令和别名

  • sha1dcsum
  • sha1dcsum_partialcoll

历史

项目历史与用法

SHA-1 Collision Detection is an MIT-licensed C library and command-line tool by Marc Stevens and Dan Shumow. It computes SHA-1 digests while detecting files produced with known cryptanalytic SHA-1 collision techniques.

项目历史

Marc Stevens and Dan Shumow published the implementation in 2017 in the context of practical SHA-1 collision attacks. Its detection method builds on Stevens's counter-cryptanalysis research and explicitly recognizes files produced by attacks such as SHAttered; later support also references SHA-mbles.

采用历史

The project was designed as a near drop-in replacement for common SHA-1 implementations and sha1sum, lowering the cost of adding collision detection to existing software. The input confirms packaging as the Homebrew formula sha1dc.

使用方式

sha1dcsum hashes files and warns when a full SHA-1 collision attack is detected; sha1dcsum_partialcoll also checks reduced-round collision examples. Developers can integrate the library through its SHA1DC API and use safe-hash mode so colliding inputs receive different defensive hashes.

为什么软件包爱好者会关心

sha1dc lets package and release engineers continue verifying legacy SHA-1 material while detecting known cryptanalytic collision constructions. It is particularly relevant to archives and software-distribution systems that cannot immediately remove every SHA-1 dependency.

时间线

  • 2013: Marc Stevens published the counter-cryptanalysis research cited by the project.
  • 2017: Project copyright begins and the SHAttered collision became a principal real-world test case.
  • Later: The official documentation added reference to detection of attacks derived from SHA-mbles.

Related projects

  • The official README relates the tool to ordinary SHA-1 libraries and sha1sum, the SHAttered collision demonstration, SHA-mbles, and Marc Stevens's counter-cryptanalysis research.

来源

  • Official library header: https://github.com/cr-marcstevens/sha1collisiondetection/blob/master/lib/sha1.h
  • Official repository and README: https://github.com/cr-marcstevens/sha1collisiondetection
  • input.source_facts.package-manager

安全态势

风险级别:绿色

narrow executable package without higher-risk signals.

风险分类器

绿色 风险 · 低 置信度 · appliance

原因

  • narrow executable package without higher-risk signals

信号

  • metadata:no-higher-risk-signals

安装行为

  • formula 元数据中未记录 Homebrew post-install 钩子。
  • Homebrew bottle 元数据适用于 12 个平台目标。
  • 构建元数据列出 2 个构建依赖。

建议审查

在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

可执行文件

已安装的可执行文件

命令类型暴露范围备注
sha1dcsumcli全局可执行文件
sha1dcsum_partialcollcli全局可执行文件

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。

页面生成时间2026-09-19
管理器版本1.0.3
管理器更新时间2026-09-14
本地数据OK
上游not checked
检测到的最新版本未检测到

https://github.com/cr-marcstevens/sha1collisiondetection

安装元数据

软件包元数据

软件包键brew:sha1dc
版本1.0.3
软件包管理器Homebrew
软件包管理器页面https://formulae.brew.sh/formula/sha1dc
主页https://github.com/cr-marcstevens/sha1collisiondetection
仓库https://github.com/cr-marcstevens/sha1collisiondetection
许可证MIT
源码归档https://github.com/cr-marcstevens/sha1collisiondetection/archive/refs/tags/stable-v1.0.3.tar.gz
最后更新2026-09-14T12:20:13+02:00
Pulseupdated
构建依赖coreutils, libtool
Bottle可用 (于 arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, monterey, sonoma, ventura, x86_64_linux)
Homebrew post-install未定义
服务未声明

注册表事实

源数据库详情

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namesha1dc
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

来源线索

由仓库数据生成

此页面由 av-webscripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • cross-ecosystem install command graph
  • curated package history
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • pkg.so package database
  • pkgdb category and tag curation