News for hackers. Stuff that matters.

A comment on Yahoo discloses hack of 1B accounts. Parent comment

Re:Yahoo discloses hack of 1B accounts by Buge on Wednesday December 14, 2016 @10:58PM (#13182274)
You are describing a first preimage attack. There have not been any computable first (or second) preimage attacks on md5.

https://stackoverflow.com/questions/822638/does-any-publishe...

There are collision attacks, but that is not relevant for password cracking.

[ Parent | on HN ]
Re:Yahoo discloses hack of 1B accounts by manarth on Thursday December 15, 2016 @02:52AM (#13183155)
From 2009: a preimage attack reduced the complexity from 2^128 to 2^123.4 [1].

It's still a big number, but it's less than the theoretical complexity.

[1] https://www.iacr.org/archive/eurocrypt2009/54790136/54790136...

[ Parent | on HN ]
Re:Yahoo discloses hack of 1B accounts by Buge on Saturday December 17, 2016 @05:54PM (#13203201)
What I meant by "computable" is something that can be computed with today's hardware.
[ Parent | on HN ]