News for hackers. Stuff that matters.

A comment on How I created two images with the same MD5 hash. Parent comment

Re:How I created two images with the same MD5 hash by afro88 on Tuesday November 04, 2014 @03:26AM (#8555583)
That's the issue though isn't it - that an attacker would have control over the dataset and have something to gain by providing a modified file under a publicly known "safe" md5. For example, compromised Linux install iso's.
[ Parent | on HN ]
Re:How I created two images with the same MD5 hash by emillon on Tuesday November 04, 2014 @04:36AM (#8555735)
In that case that's second pre-image resistance though, not collision resistance. TTBOMK that's still not possible with MD5 (though it will probably be in a few years).
[ Parent | on HN ]
Re:How I created two images with the same MD5 hash by brohee on Tuesday November 04, 2014 @06:48AM (#8556075)
Only if the attacker had no part in making the "safe" ISO image in the first place. You just cannot know. Using MD5 makes no sense whatsoever, if you don't need collision resistance, there are faster options, and if you do, it's obviously completely unsuitable.
[ Parent | on HN ]