I’m not aware of a way to make md5 collisions that also have the exact same file size. It would be nice to upgrade to SHA256 (and we have already prototyped the code to do so) but that would increase the size in-memory of the hash-based signatures rather significantly. Still, it is on our roadmap.
-Micah From: clamav-users <[email protected]> on behalf of Asok Kumar via clamav-users <[email protected]> Reply-To: ClamAV users ML <[email protected]> Date: Wednesday, August 21, 2019 at 12:47 AM To: "[email protected]" <[email protected]> Cc: Asok Kumar <[email protected]> Subject: Re: [clamav-users] How do you add specific files to white list ? On Tue, 20 Aug 2019 at 22:51, Eric Tykwinski <[email protected]<mailto:[email protected]>> wrote: sigtool --md5 /path_to_file/libeay32.dll >> /var/lib/clamav/whitelist.fp File Contents: 59bde01a3d6a4e3eca97eb01e50fb346:2160112:libeay32.dll thank you for an to the point and accurate answer and my problem is solved, not cribbing about small issues but shouldn't we be using a more secure has algorithm now a days ?
_______________________________________________ clamav-users mailing list [email protected] https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
