Single-block collision for MD5

Re:Single-block collision for MD5 by rmc on Sunday January 29, 2012 @01:55PM (#3525821)

In theory there are no new security implications, since you shouldn't be using MD5 for secure stuff anyway. The writing has been on the wall for MD5 for a while. This is just another interesting nail in the coffin. It's getting easier and easier to do thing with MD5 that you shouldn't be able to do.

[ Parent | on HN ]

Re:Single-block collision for MD5 by muyuu on Sunday January 29, 2012 @02:28PM (#3525900)

It's still not trivial at all to introduce a payload and make it so the whole package matches a MD5 hash. Haven't seen a PoC ever do this.

Would recommend to go SHA anyway.

[ Parent | on HN ]

Re:Single-block collision for MD5 by nitrogen on Sunday January 29, 2012 @08:40PM (#3527075)

Several proofs of concept have been listed elsewhere in the thread.

[ Parent | on HN ]

Re:Single-block collision for MD5 by muyuu on Monday January 30, 2012 @03:35AM (#3527946)

Thanks, they weren't there when I posted. Will look into that.

[ Parent | on HN ]