Re: MD5 Collisions and Evidence Integrity

On Mon, 15 Nov 2004 14:23:50 EST, Gary Kessler said:

> When I look at this, I get totally different results. First, there are severa
l differences between the files (not just the one that your cmp command shows).

> >    $ cmp file1.dat file2.dat
> >    file1.dat file2.dat differ: char 20, line 1

This is *expected* behavior of the 'cmp' command. It doesn't report additional
differences (which is reasonable - if you only care about same/different, and
2 multi-gigabyte files differ in the first 100 bytes, it's a HUGE win).  If you
want *all* the differences, use 'diff' (which however gets interesting when
comparing 2 non-text files....)

% man cmp
NAME
     cmp - compare two files

SYNOPSIS
     cmp [-l | -s] file1 file2 [skip1 [skip2]]

DESCRIPTION
     The cmp utility compares two files of any type and writes the results to
     the standard output.  By default, cmp is silent if the files are the
     same; if they differ, the byte and line number at which the first differ-
     ence occurred is reported.

pgpuLwP7TsYMi.pgp
Description: PGP signature