Abstract
While conducting a validation study of proficiency test media we found that applying the same hash algorithm against a single CD using different forensic applications resulted in different hash values. We formulated a series of experiments to determine the cause of the anomalous hash values. Our results suggest that certain write options cause forensic applications to report different hash values. We examine the possible consequences of these anomalies in legal proceedings and provide best practices for the use of hashing procedures.
Original language | American English |
---|---|
Title of host publication | Advances in Digital Forensics III |
DOIs | |
State | Published - 2007 |
Externally published | Yes |
Keywords
- cryptographic hash functions
- one-way hashing
- CD-R media
Disciplines
- Other Computer Sciences
- Forensic Science and Technology