radare2/man/rahash2.1

.Dd Mar 12, 2022
.Dt RAHASH2 1
.Sh NAME
.Nm rahash2
.Nd block based hashing utility
.Sh SYNOPSIS
.Nm rahash2
.Op Fl BbdDehjrknvq
.Op Fl a Ar algorithm
.Op Fl b Ar size
.Op Fl D Ar algo
.Op Fl E Ar algo
.Op Fl f Ar from
.Op Fl i Ar iterations
.Op Fl I Ar IV
.Op Fl n Ar blocks
.Op Fl s Ar string
.Op Fl S Ar seed
.Op Fl p Ar type
.Op Fl x Ar hexstr
.Op Fl t Ar to
.Op Fl c Ar hash
.Op [file] ...
.Sh DESCRIPTION
This program is part of the radare project.
.Pp
Rahash2 allows you to calculate, check and show the hash values of each block of a target file. The block size is 32768 bytes by default. It's allowed to hash from stdin using '-' as a target file. You can compare against a known hash and get the result in the exit status.
.Pp
You can hash big files by hashing each block and later determine what part of it has been modified. Useful for filesystem analysis.
.Pp
This command can be used to calculate hashes of a certain part of a file or a command line passed string.
.Pp
This is the command used by the 'ph' command of radare.
.Bl -tag -width Fl
.It Fl a Ar algo
Comma separated list of algorithms to use when hashing files or strings. See -L to list the supported hashing algorithms. This flag can be passed multiple times instead of separating them by commas.
.It Fl b Ar blocksize
Define the block size
.It Fl c Ar hash
Compare the computed hash with this one. Allowed only when a single hash is computed.
.It Fl D Ar algo
Decrypt instead of hash using the given algorithm (base64, base91, rc4, aes, xor, blowfish, rot, rol, ror, rc2, rc6, punycode)
.It Fl e
Use little endian to display checksums
.It Fl E Ar algo
Encrypt instead of hash using the given algorithm (base64, base91, rc4, aes, xor, blowfish, rot, rol, ror, rc2, rc6, punycode)
.It Fl i Ar iters
Apply the hash Iters times to itself+seed
.It Fl I Ar [^]s:string|hexstr
Set initialization vector (IV) for the cryptographic functions.
.It Fl j
Show output in JSON (see -r and -J). If passed more than once results in -J
.It Fl j
New simplified JSON output, maybe this format will replace -j, but it's added as a new flag to not break backward compat until proper discussion
.It Fl B
Show per-block hash
.It Fl k
Show result using OpenSSH's VisualHostKey randomart algorithm
.It Fl n
Amount of blocks to hash
.It Fl s Ar string
Hash this string instead of using the 'source' and 'hash-file' arguments.
.It Fl S Ar [^]s:string|hexstr
Set seed to hash with, use ^to prefix seed, otherwise its suffixed. If the seed is just a dash '-' it will read from stdin, this is useful to provide huge XOR payloads or other crypto keys bigger than few bytes.
.It Fl f Ar from
Start hashing at given address
.It Fl t Ar to
Stop hashing at given address
.It Fl p Ar arg
Show vertical entropy/statistical entropy graphs
.It Fl q
Quiet mode (-qq for even quieter!)
.It Fl r
Show output in radare commands
.It Fl x Ar hexstr
Hash the given hexpair string instead of using the 'source' and 'hash-file' arguments.
.It Fl v
Show version information
.It Fl h
Show usage help message.
.El
.Sh DIAGNOSTICS
.Ex -std
.Pp
When -c is used, exit status 0 indicates a match between the expected and computed hashes.
.Sh SEE ALSO
.Pp
.Xr radare2(1)
.Sh AUTHORS
.Pp
pancake <pancake@nopcode.org>
Add rahash2 -J for simplified single object name=hash output ##tools 2022-03-25 18:26:32 +00:00			`.Dd Mar 12, 2022`
Fix manpages for Void/Net/OpenBSD 2014-09-30 09:01:45 +00:00			`.Dt RAHASH2 1`
More fixups for the manpages 2014-09-30 09:37:26 +00:00			`.Sh NAME`
Updating rahash2 man page (#7141) [] Change every instance of "Hasher" to "rahash2" [] Replace the mention of r2's `#` command with `ph` 2017-03-26 14:52:38 +00:00			`.Nm rahash2`
More fixups for the manpages 2014-09-30 09:37:26 +00:00			`.Nd block based hashing utility`
* Initial work on the register API for r_debug - r_debug_reg and r_debug_regset - Handles dbg->newstate to force register sync - Only dbg.reg.read() for x86-32 and 64 * Added dummy copy of manpages (from old radare1) 2009-04-15 11:09:36 +00:00			`.Sh SYNOPSIS`
Updating rahash2 man page (#7141) [] Change every instance of "Hasher" to "rahash2" [] Replace the mention of r2's `#` command with `ph` 2017-03-26 14:52:38 +00:00			`.Nm rahash2`
Fix rahash2 man page (#11768) * Fix rahash2 man file * Add indication for n 2018-10-08 11:32:07 +00:00			`.Op Fl BbdDehjrknvq`
* Initial work on the register API for r_debug - r_debug_reg and r_debug_regset - Handles dbg->newstate to force register sync - Only dbg.reg.read() for x86-32 and 64 * Added dummy copy of manpages (from old radare1) 2009-04-15 11:09:36 +00:00			`.Op Fl a Ar algorithm`
			`.Op Fl b Ar size`
update man page update man 2016-04-11 09:31:26 +00:00			`.Op Fl D Ar algo`
Add rahash2 -E to encrypt instead of hash 2016-03-07 02:24:52 +00:00			`.Op Fl E Ar algo`
Initial work to support entropy graphs in rahash2 via r2 - Wip. related to #9871 2018-04-12 14:47:24 +00:00			`.Op Fl f Ar from`
Initial import of rahash2 '-S' seed and '-i' iterations 2013-11-02 10:49:32 +00:00			`.Op Fl i Ar iterations`
add aes-cbc encryption to rahash2 remove unnecessary comment update man 2016-04-14 19:39:45 +00:00			`.Op Fl I Ar IV`
Fix rahash2 man page (#11768) * Fix rahash2 man file * Add indication for n 2018-10-08 11:32:07 +00:00			`.Op Fl n Ar blocks`
Initial work to support entropy graphs in rahash2 via r2 - Wip. related to #9871 2018-04-12 14:47:24 +00:00			`.Op Fl s Ar string`
Initial import of rahash2 '-S' seed and '-i' iterations 2013-11-02 10:49:32 +00:00			`.Op Fl S Ar seed`
Initial work to support entropy graphs in rahash2 via r2 - Wip. related to #9871 2018-04-12 14:47:24 +00:00			`.Op Fl p Ar type`
Update rahash2 manpage and support -f/-t in -s/-x 2015-04-02 23:49:01 +00:00			`.Op Fl x Ar hexstr`
* Update manpages 2011-12-02 02:43:08 +00:00			`.Op Fl t Ar to`
Add rabin2 -c to compare hash and computed hash from file - adds support for -c parameter - bring in line with coding guidelines - formatted code with tabs - added -c and exit status info to rahash2 man 2016-02-21 01:29:23 +00:00			`.Op Fl c Ar hash`
* Write and install manpages * Merge r_trace into r_debug (RDebugTrace) - Implement 'dt' command to manage debugging traces - TODO: Track register values and memory changes - Added dbg.trace and dbg.trace.tag * Added r_sys_now() to retrieve ut64 value of current time - Must check endianness issues * Initial work trying to implement RPATH support to ELF * Less flat command tree - 'dt' is now 'dbt' - 'dk' is now 'dpk' * Some more random syntax cleanup fixes * Say 'yes/no' instead of 'ok/fail' in check-langs script 2010-03-12 17:46:11 +00:00			`.Op [file] ...`
* Initial work on the register API for r_debug - r_debug_reg and r_debug_regset - Handles dbg->newstate to force register sync - Only dbg.reg.read() for x86-32 and 64 * Added dummy copy of manpages (from old radare1) 2009-04-15 11:09:36 +00:00			`.Sh DESCRIPTION`
			`This program is part of the radare project.`
			`.Pp`
Updating rahash2 man page (#7141) [] Change every instance of "Hasher" to "rahash2" [] Replace the mention of r2's `#` command with `ph` 2017-03-26 14:52:38 +00:00			`Rahash2 allows you to calculate, check and show the hash values of each block of a target file. The block size is 32768 bytes by default. It's allowed to hash from stdin using '-' as a target file. You can compare against a known hash and get the result in the exit status.`
* Initial work on the register API for r_debug - r_debug_reg and r_debug_regset - Handles dbg->newstate to force register sync - Only dbg.reg.read() for x86-32 and 64 * Added dummy copy of manpages (from old radare1) 2009-04-15 11:09:36 +00:00			`.Pp`
			`You can hash big files by hashing each block and later determine what part of it has been modified. Useful for filesystem analysis.`
			`.Pp`
			`This command can be used to calculate hashes of a certain part of a file or a command line passed string.`
			`.Pp`
Updating rahash2 man page (#7141) [] Change every instance of "Hasher" to "rahash2" [] Replace the mention of r2's `#` command with `ph` 2017-03-26 14:52:38 +00:00			`This is the command used by the 'ph' command of radare.`
* Initial work on the register API for r_debug - r_debug_reg and r_debug_regset - Handles dbg->newstate to force register sync - Only dbg.reg.read() for x86-32 and 64 * Added dummy copy of manpages (from old radare1) 2009-04-15 11:09:36 +00:00			`.Bl -tag -width Fl`
			`.It Fl a Ar algo`
Allow rahash2 -a to be passed multiple times ##tools 2022-03-25 11:54:01 +00:00			`Comma separated list of algorithms to use when hashing files or strings. See -L to list the supported hashing algorithms. This flag can be passed multiple times instead of separating them by commas.`
Fix offset in randomart for rahash2 2013-02-12 01:55:22 +00:00			`.It Fl b Ar blocksize`
* Write and install manpages * Merge r_trace into r_debug (RDebugTrace) - Implement 'dt' command to manage debugging traces - TODO: Track register values and memory changes - Added dbg.trace and dbg.trace.tag * Added r_sys_now() to retrieve ut64 value of current time - Must check endianness issues * Initial work trying to implement RPATH support to ELF * Less flat command tree - 'dt' is now 'dbt' - 'dk' is now 'dpk' * Some more random syntax cleanup fixes * Say 'yes/no' instead of 'ok/fail' in check-langs script 2010-03-12 17:46:11 +00:00			`Define the block size`
Add rabin2 -c to compare hash and computed hash from file - adds support for -c parameter - bring in line with coding guidelines - formatted code with tabs - added -c and exit status info to rahash2 man 2016-02-21 01:29:23 +00:00			`.It Fl c Ar hash`
			`Compare the computed hash with this one. Allowed only when a single hash is computed.`
update man page update man 2016-04-11 09:31:26 +00:00			`.It Fl D Ar algo`
list all encoders/decoders supported by woE/woD and rahash2 -E/-D (fix #4851) list all encoders/decoders supported by woE/woD and rahash2 -E/-D (fix #4851) 2016-05-11 20:25:54 +00:00			`Decrypt instead of hash using the given algorithm (base64, base91, rc4, aes, xor, blowfish, rot, rol, ror, rc2, rc6, punycode)`
Add rahash2 -e 2014-02-05 11:07:27 +00:00			`.It Fl e`
			`Use little endian to display checksums`
Add rahash2 -E to encrypt instead of hash 2016-03-07 02:24:52 +00:00			`.It Fl E Ar algo`
list all encoders/decoders supported by woE/woD and rahash2 -E/-D (fix #4851) list all encoders/decoders supported by woE/woD and rahash2 -E/-D (fix #4851) 2016-05-11 20:25:54 +00:00			`Encrypt instead of hash using the given algorithm (base64, base91, rc4, aes, xor, blowfish, rot, rol, ror, rc2, rc6, punycode)`
Initial import of rahash2 '-S' seed and '-i' iterations 2013-11-02 10:49:32 +00:00			`.It Fl i Ar iters`
			`Apply the hash Iters times to itself+seed`
add aes-cbc encryption to rahash2 remove unnecessary comment update man 2016-04-14 19:39:45 +00:00			`.It Fl I Ar [^]s:string\|hexstr`
			`Set initialization vector (IV) for the cryptographic functions.`
Fix #2049 - Add rahash2 -j 2015-02-06 13:15:19 +00:00			`.It Fl j`
Add rahash2 -J for simplified single object name=hash output ##tools 2022-03-25 18:26:32 +00:00			`Show output in JSON (see -r and -J). If passed more than once results in -J`
			`.It Fl j`
			`New simplified JSON output, maybe this format will replace -j, but it's added as a new flag to not break backward compat until proper discussion`
* Update manpages 2011-12-02 02:43:08 +00:00			`.It Fl B`
			`Show per-block hash`
Add randomart print mode (pk/pK commands and rahash2 -k) Random code cleanup Remove borders in webui/two 2013-02-12 01:42:34 +00:00			`.It Fl k`
			`Show result using OpenSSH's VisualHostKey randomart algorithm`
Fix rahash2 man page (#11768) * Fix rahash2 man file * Add indication for n 2018-10-08 11:32:07 +00:00			`.It Fl n`
			`Amount of blocks to hash`
* Update manpages 2011-12-02 02:43:08 +00:00			`.It Fl s Ar string`
			`Hash this string instead of using the 'source' and 'hash-file' arguments.`
Initial import of rahash2 '-S' seed and '-i' iterations 2013-11-02 10:49:32 +00:00			`.It Fl S Ar [^]s:string\|hexstr`
Add rahash2 -E xor and support -S - and -S @ to slurp stdin or files 2017-03-25 23:38:57 +00:00			`Set seed to hash with, use ^to prefix seed, otherwise its suffixed. If the seed is just a dash '-' it will read from stdin, this is useful to provide huge XOR payloads or other crypto keys bigger than few bytes.`
* Update manpages 2011-12-02 02:43:08 +00:00			`.It Fl f Ar from`
			`Start hashing at given address`
			`.It Fl t Ar to`
			`Stop hashing at given address`
Initial work to support entropy graphs in rahash2 via r2 - Wip. related to #9871 2018-04-12 14:47:24 +00:00			`.It Fl p Ar arg`
			`Show vertical entropy/statistical entropy graphs`
Add rahash2 -qq 2016-03-08 02:29:59 +00:00			`.It Fl q`
			`Quiet mode (-qq for even quieter!)`
* Update manpages 2011-12-02 02:43:08 +00:00			`.It Fl r`
			`Show output in radare commands`
Update rahash2 manpage and support -f/-t in -s/-x 2015-04-02 23:49:01 +00:00			`.It Fl x Ar hexstr`
			`Hash the given hexpair string instead of using the 'source' and 'hash-file' arguments.`
* Update manpages 2011-12-02 02:43:08 +00:00			`.It Fl v`
			`Show version information`
* Initial work on the register API for r_debug - r_debug_reg and r_debug_regset - Handles dbg->newstate to force register sync - Only dbg.reg.read() for x86-32 and 64 * Added dummy copy of manpages (from old radare1) 2009-04-15 11:09:36 +00:00			`.It Fl h`
			`Show usage help message.`
			`.El`
Add rabin2 -c to compare hash and computed hash from file - adds support for -c parameter - bring in line with coding guidelines - formatted code with tabs - added -c and exit status info to rahash2 man 2016-02-21 01:29:23 +00:00			`.Sh DIAGNOSTICS`
			`.Ex -std`
			`.Pp`
			`When -c is used, exit status 0 indicates a match between the expected and computed hashes.`
* Initial work on the register API for r_debug - r_debug_reg and r_debug_regset - Handles dbg->newstate to force register sync - Only dbg.reg.read() for x86-32 and 64 * Added dummy copy of manpages (from old radare1) 2009-04-15 11:09:36 +00:00			`.Sh SEE ALSO`
			`.Pp`
Add initial rvc2 command ##shell (#18716) 2021-05-20 01:34:23 +00:00			`.Xr radare2(1)`
* Initial work on the register API for r_debug - r_debug_reg and r_debug_regset - Handles dbg->newstate to force register sync - Only dbg.reg.read() for x86-32 and 64 * Added dummy copy of manpages (from old radare1) 2009-04-15 11:09:36 +00:00			`.Sh AUTHORS`
			`.Pp`
Use latest ACR for triplet fixes and update manpage dates 2013-11-11 11:00:39 +00:00			`pancake <pancake@nopcode.org>`