libffuzzy : Fast ssdeep comparison library =========================================== libffuzzy is a fuzzy hash comparison library compatible with ssdeep (<http://ssdeep.sourceforge.net/>) version 2.10. This library is designed to be fast and thread-safe. It does not even allocate memory at run time (which may increase performance on parallel computation). The another purpose to write this library is to find implementation issues in ssdeep. During this re-implementation, the author found several issues which may affect robustness and portability of ssdeep. Installation ------------- If you don't have `configure` script (e.g. on git work-tree), run `./bootstrap.sh` or `autoreconf -i` first. Then you can install the program by `./configure`, `make` and then `make install`. Functions ---------- Global functions are named like ffuzzy_SOMETHING. You can use ffuzzy_compare function just like fuzzy_compare. You can also hold ssdeep digest after parsing. Use ffuzzy_read_digest to parse digest and use ffuzzy_compare_digest to compare against another digest (after parsing). Performance ------------ Version 1.1 achieved expected performance gain. libffuzzy is now faster than libfuzzy in most cases. In version 2.0, interfaces for specialized comparison and clustering are added. Clustering applications will get faster if you use this optimized implementation correctly. In the large clustering job (about 100k hashes), libffuzzy 2.0 was about 60% faster than libfuzzy 2.11.