I'm looking to store two types of hashes for recognizing blacklisted code. These are the FireEye "import hash" (or imphash) and the ssdeep "fuzzy hash". Is there a regex (or formal documentation) I can use for type-checking these hashes?
The examples I've seen of an imphash look like MD5, but I haven't found a formal commitment to 32 hex characters. Similarly, I've seen a few examples of a fuzzy hash, but no commitment to a particular length, character set, or format.
Thanks.... (Cross-posted to Cryptography)