Follow

Where do the AccessData KFF hash libraries come from?

Created by: Brendan Bone
Created date:
Last Updated date:

Question

Where do the AccessData KFF hash libraries come from?

 

Answer

AccessData collects and provides hash values from several government institutions.

NSRL

NIST (the National Institute of Standards and Technology) produces a collection called the "National Software Reference Library" (NSRL). The NSRL is a large body of hashes computed from application installer programs. Further information about the NSRL can be found at http://www.nsrl.nist.gov/ and http://www.nist.gov/oles/forensics/forensic-database-tech-digital-evidence-table.cfm.

 

NDIC

NDIC (the National Drug Intelligence Center) created a collection of hashes called "HashKeeper", which they divided into Alert and Ignore groups. Their Alert sets came largely from prosecuted child pornography cases. NDIC closed its doors in 2012, but some further information can be found at http://www.justice.gov/archive/ndic/.

 

DHS

DHS (the Department of Homeland Security) maintains hash sets of known and suspected child exploitation files found in ICE investigations. Further information can be found at http://www.nist.gov/oles/forensics/forensic-database-tech-digital-evidence-table.cfm.

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request

Comments

Powered by Zendesk