U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Information Technology Laboratory / Software and Systems Division

Software Quality Group

Current RDS Hash Sets

Share

RDS Version 2.76 - March 2022

RDSv3 Version 2022.03.1 – March 2022 

Version 2022.03.1 is the first production release of the RDSv3 format. This publication is the next step in the transition away from the flat text file format of RDS 2.XX, to the SQLite database format, which includes SHA-256 hashes, while removing the CRC-32 hash, among other publication changes. The new RDSv3 format will be the only publication format released by the NSRL begining March 2023. Version 2022.03.1 of the RDSv3 format may be downloaded below.

For a more detailed description of the RDSv3 publication format, please download the demonstration set below, and the information documents associated with the set.

NOTE: As of RDS 2.74, the NSRL has split the iOS RDS set into a modern and a legacy set. The regularly published iOS RDS set now contains hashes from iOS mobile applications downloaded and processed by the NSRL starting in July 2021. The legacy iOS RDS set contains hashes from iOS mobile applications dating back to 2016 and 2017. This set was not updated frequently, and contained hashes from mobile applications, not all collected directly by the NSRL. Moving forward, the modern iOS RDS set will contain hashes from iOS mobile applications collected and processed directly by the NSRL. 

For legacy iOS mobile application hashes, please use the iOS hash set in RDS 2.73.1. 

UDF images of RDS CDs

If you have a fast Internet connection, you may download UDF image files and burn your own copy of the RDS CDs. Be aware that the UDF image files range between 500MB to nearly 4GB in size, and may take time to download.

NOTE: This current distribution of the RDS is being served from the amazon cloud. You may receive a notice that you are leaving the NSRL website.

The difference in the Modern sets are as follows:

  1. Modern RDS (microcomputer applications) - contains the comprehensive set of ALL appearances of files in  modern applications; many file entries are duplicated
  2. Modern RDS  (minimal) - contains the set of DISTINCT appearances of files in  modern applications; no file entries are duplicated
  3. Modern RDS  (unique) - contains the set of file entries that appear ONLY ONCE  in the entire NSRL collection; these are unique to each off the applications that are in the collection

If a file exists with SHA1 value "024DD2A428CF0B450E461ED2A2EB6A1666CF392B" :

  • Set #1 can list ALL of the applications that contain the file.
  • Set #2 can list the fact that at least one application has that file.
  • Set #3 can list the single application that file with which that file must be associated (to the limit that NSRL has encountered it).

The most common use is set #2.

If you are interested in earlier releases of the RDS contact us. 

RDSv3 Version 2022.03.2 Delta - March 2022 zip Downloads

NOTE: This current distribution of the RDS is being served from the amazon cloud. You may receive a notice that you are leaving the NSRL website. Please be aware that files of the RDSv3 format can be very large, and will take time to download. Please reference the current RDSv3 README.txt file for exact file sizes.
The following delta set should be applied to the modern RDSv3 SQLite database in order to fix a minor error discovered within the set.

RDSv3 Version 2022.03.1 - March 2022 zip Downloads

NOTE: This current distribution of the RDS is being served from the amazon cloud. You may receive a notice that you are leaving the NSRL website. Please be aware that files of the RDSv3 format can be very large, and will take time to download. Please reference the current RDSv3 README.txt file for exact file sizes.

RDSv3 Demonstration Set – December 2021 zip Downloads

NOTE: This current distribution of the RDS is being served from the amazon cloud. You may receive a notice that you are leaving the NSRL website.

Hash Converter Windows GUI tool

The MD5, SHA1 and SHA256 file signatures for these files are available here.

There is a Windows GUI tool HashConverter.zip that the NSRL is allowed to redistribute.

You can pick up the NSRL Perl conversion code at rds2hk.zip
When you unpack the zip file, there is one file, "rds2hk.pl".


enter:  perl rds2hk.pl -h
and you will get the help output:  Usage : rds2hk.pl [-h] -f format [-d RDS_directory] [-l logfile] [-p product_id] [-u]
-h : help with command line options
-f format : one of hk , 1.5 , 2.0 (MANDATORY)
-l logfile : print log info to a file
-d dir : directory holding NSRLProd.txt, NSRLFile.txt NSRLOS.txt and NSRLMfg.txt
-u : guarantee a unique product line in hk output
Enter the command:  perl rds2hk.pl -f hk -d SOME_DIR
and you'll get two files, "outfile.hke" and "outfile.hsh" that you can rename and pull into Hashkeeper.

 

Forensic Science, Digital evidence, Information technology and Software research

Contacts

Created May 25, 2016, Updated March 28, 2022