Hi, I have been trying to understand the algorithm used for the "half-md4" in htree-structured directories. Going through the code (and trying not to get into reverse engineering), it looks like it is part of md4 but not entirely? Yet any subset I take doesn't quite line up with what I see in an actual sample. What is the algorithm it is using to turn an entry of, e.g., "file125" into the appropriate hash. I did run a live sample, and try to get some form of correlation between the actual md4 hash (16 bytes) of the above to the actual entry (4 bytes) shown by debugfs, without much luck. What basic thing am I missing? Separately, how does the seed play into it? Thanks Avi
