I’m not aware of a way to make md5 collisions that also have the exact same file size. It would be nice to upgrade to SHA256 (and we have already prototyped the code to do so) but that would increase the size in-memory of the hash-based signatures rather significantly. Still, it is on our roadmap.
-Micah From: clamav-users <clamav-users-boun...@lists.clamav.net> on behalf of Asok Kumar via clamav-users <clamav-users@lists.clamav.net> Reply-To: ClamAV users ML <clamav-users@lists.clamav.net> Date: Wednesday, August 21, 2019 at 12:47 AM To: "clamav-users@lists.clamav.net" <clamav-users@lists.clamav.net> Cc: Asok Kumar <mbait...@gmail.com> Subject: Re: [clamav-users] How do you add specific files to white list ? On Tue, 20 Aug 2019 at 22:51, Eric Tykwinski <eric-l...@truenet.com<mailto:eric-l...@truenet.com>> wrote: sigtool --md5 /path_to_file/libeay32.dll >> /var/lib/clamav/whitelist.fp File Contents: 59bde01a3d6a4e3eca97eb01e50fb346:2160112:libeay32.dll thank you for an to the point and accurate answer and my problem is solved, not cribbing about small issues but shouldn't we be using a more secure has algorithm now a days ?
_______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
