From clamav-devel-bounces@lists.clamav.net Thu Jul 2 22:11:03 2009 Return-Path: X-Original-To: list@tad.clamav.net Delivered-To: list@tad.clamav.net X-Virus-Scanned: Debian amavisd-new at tad.clamav.net Received: from tad.clamav.net ([127.0.0.1]) by localhost (tad.clamav.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 13SKYZygDACY; Thu, 2 Jul 2009 22:11:03 +0200 (CEST) Received: from tad.clamav.net (localhost.localdomain [127.0.0.1]) by tad.clamav.net (Postfix) with ESMTP id 4F2EF16C05A; Thu, 2 Jul 2009 22:11:02 +0200 (CEST) X-Original-To: clamav-devel@tad.clamav.net Delivered-To: clamav-devel@tad.clamav.net X-Virus-Scanned: Debian amavisd-new at tad.clamav.net Received: from tad.clamav.net ([127.0.0.1]) by localhost (tad.clamav.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CFDo+DvIxevB for ; Thu, 2 Jul 2009 22:10:59 +0200 (CEST) Received: from i61797.naver.com (i61797.naver.com [114.111.32.103]) by tad.clamav.net (Postfix) with SMTP id 1C11416C056 for ; Thu, 2 Jul 2009 22:10:57 +0200 (CEST) Received: (qmail 25311 invoked from network); 2 Jul 2009 20:10:54 -0000 Received: from unknown (HELO localhost) (127.0.0.1) by i61797.naver.com with SMTP; 2 Jul 2009 20:10:54 -0000 MIME-Version: 1.0 Message-Id: From: =?US-ASCII?B?U2FuZyBLaWwgQ2hh?= Importance: normal X-Priority: 3 (Normal) Date: Fri, 03 Jul 2009 05:10:54 +0900 To: Subject: [Clamav-devel] Why MD5 signatures prevail? X-BeenThere: clamav-devel@lists.clamav.net X-Mailman-Version: 2.1.11 Precedence: list Reply-To: ClamAV Development List-Id: ClamAV Development List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: clamav-devel-bounces@lists.clamav.net Errors-To: clamav-devel-bounces@lists.clamav.net Hello, When I look at ClamAV's signatures, most of them are md5 signatures. Also, when I download older version of ClamAV like 0.90, to compare the signature database, number of md5 signatures have been grown dramatically. Is there any special reason for this? I guess one of the reasons will be that it is the most quickest way to update signatures. Am I thinking it correct? Any other reasons for the expanding md5 signatures? Thank you in advance ! ------------------------------------------------------------------------ NAVER :: Korea's No.1 search portal www.naver.com _______________________________________________ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches to our Bugzilla: http://bugs.clamav.net