plaso.analyzers.hashers package

Submodules

plaso.analyzers.hashers.interface module

The hasher interface.

class plaso.analyzers.hashers.interface.BaseHasher

Bases: object

Base class for objects that calculate hashes.

DESCRIPTION = u'Calculates a digest hash over input data.'

GetBinaryDigest()

Retrieves the digest of the hash function as a binary string.

Returns:

binary hash digest calculated over the data blocks passed to

Update().

Return type:bytes

GetStringDigest()

Retrieves the digest of the hash function expressed as a Unicode string.

Returns:

string hash digest calculated over the data blocks passed to

Update(). The string consists of printable Unicode characters.

Return type:str

NAME = u'base_hasher'

Update(data)

Updates the current state of the hasher with a new block of data.

Repeated calls to update are equivalent to one single call with the concatenation of the arguments.

Parameters:data (bytes) – data with which to update the context of the hasher.

plaso.analyzers.hashers.manager module

This file contains a class for managing digest hashers for Plaso.

class plaso.analyzers.hashers.manager.HashersManager

Bases: object

Class that implements the hashers manager.

classmethod DeregisterHasher(hasher_class)

Deregisters a hasher class.

The hasher classes are identified based on their lower case name.

Parameters:hasher_class (type) – class object of the hasher. Raises:KeyError – if hasher class is not set for the corresponding name.

classmethod GetHasher(hasher_name)

Retrieves an instance of a specific hasher.

Parameters:hasher_name – the name of the hasher to retrieve. Returns:hasher. Return type:BaseHasher Raises:KeyError – if hasher class is not set for the corresponding name.

classmethod GetHasherClasses(hasher_names=None)

Retrieves the registered hashers.

Parameters:

hasher_names (list[str]) – names of the hashers to retrieve.

Yields:

tuple –

containing:

str: parser name type: next hasher class.

classmethod GetHasherNames()

Retrieves the names of all loaded hashers.

Returns:hasher names. Return type:list[str]

classmethod GetHasherNamesFromString(hasher_names_string)

Retrieves a list of a hasher names from a comma separated string.

Takes a string of comma separated hasher names transforms it to a list of hasher names.

Parameters:hasher_names_string (str) – comma separated names of hashers to enable, the string ‘all’ to enable all hashers or ‘none’ to disable all hashers. Returns:

names of valid hashers from the string, or an empty list if no

valid names are found.

Return type:list[str]

classmethod GetHashers(hasher_names)

Retrieves instances for all the specified hashers.

Parameters:hasher_names (list[str]) – names of the hashers to retrieve. Returns:hashers. Return type:list[BaseHasher]

classmethod GetHashersInformation()

Retrieves the hashers information.

Returns:containing:

str: hasher name. str: hasher description.

Return type:list[tuple]

classmethod RegisterHasher(hasher_class)

Registers a hasher class.

The hasher classes are identified based on their lower case name.

Parameters:hasher_class (type) – class object of the hasher. Raises:KeyError – if hasher class is already set for the corresponding name.

plaso.analyzers.hashers.md5 module

The MD5 hasher implementation.

class plaso.analyzers.hashers.md5.MD5Hasher

Bases: plaso.analyzers.hashers.interface.BaseHasher

This class provides MD5 hashing functionality.

DESCRIPTION = u'Calculates an MD5 digest hash over input data.'

GetBinaryDigest()

Returns the digest of the hash function as a binary string.

Returns:

binary string hash digest calculated over the data blocks passed to

Update().

Return type:bytes

GetStringDigest()

Returns the digest of the hash function expressed as a Unicode string.

Returns:

string hash digest calculated over the data blocks passed to

Update(). The string consists of printable Unicode characters.

Return type:str

NAME = u'md5'

Update(data)

Updates the current state of the hasher with a new block of data.

Repeated calls to update are equivalent to one single call with the concatenation of the arguments.

Parameters:data (bytes) – block of data with which to update the context of the hasher.

plaso.analyzers.hashers.sha1 module

The SHA-1 Hasher implementation

class plaso.analyzers.hashers.sha1.SHA1Hasher

Bases: plaso.analyzers.hashers.interface.BaseHasher

This class provides SHA-1 hashing functionality.

DESCRIPTION = u'Calculates a SHA-1 digest hash over input data.'

GetBinaryDigest()

Returns the digest of the hash function as a binary string.

Returns:

binary string hash digest calculated over the data blocks passed to

Update().

Return type:bytes

GetStringDigest()

Returns the digest of the hash function expressed as a Unicode string.

Returns:

string hash digest calculated over the data blocks passed to

Update(). The string consists of printable Unicode characters.

Return type:str

NAME = u'sha1'

Update(data)

Updates the current state of the hasher with a new block of data.

Repeated calls to update are equivalent to one single call with the concatenation of the arguments.

Parameters:data (bytes) – block of data with which to update the context of the hasher.

plaso.analyzers.hashers.sha256 module

The SHA-256 Hasher implementation

class plaso.analyzers.hashers.sha256.SHA256Hasher

Bases: plaso.analyzers.hashers.interface.BaseHasher

This class provides SHA-256 hashing functionality.

DESCRIPTION = u'Calculates a SHA-256 digest hash over input data.'

GetBinaryDigest()

Returns the digest of the hash function as a binary string.

Returns:

binary string hash digest calculated over the data blocks passed to

Update().

Return type:bytes

GetStringDigest()

Returns the digest of the hash function expressed as a Unicode string.

Returns:

string hash digest calculated over the data blocks passed to

Update(). The string consists of printable Unicode characters.

Return type:str

NAME = u'sha256'

Update(data)

Updates the current state of the hasher with a new block of data.

Repeated calls to update are equivalent to one single call with the concatenation of the arguments.

Parameters:data (bytes) – block of data with which to update the context of the hasher.

Module contents

This file contains an import statement for each hasher.