How I created two images with the same MD5 hash

Re:How I created two images with the same MD5 hash by gliptic on Tuesday November 04, 2014 @08:41AM (#8556400)

You can also use e.g. BLAKE2 which is at least as fast as MD5, while still being cryptographically strong. Win-win.

[ Parent | on HN ]

Re:How I created two images with the same MD5 hash by TheGrassyKnoll on Tuesday November 04, 2014 @05:25PM (#8559434)

Nice BLAKE2 article from HN in March, 2014

https://leastauthority.com/blog/BLAKE2-harder-better-faster-...

[ Parent | on HN ]

Re:How I created two images with the same MD5 hash by _almosnow on Tuesday November 04, 2014 @09:08AM (#8556524)

Thanks for BLAKE2

[ Parent | on HN ]

Re:How I created two images with the same MD5 hash by smt88 on Tuesday November 04, 2014 @03:29PM (#8558868)

For hashing passwords, you want something slow, not fast.

[ Parent | on HN ]

Re:How I created two images with the same MD5 hash by gliptic on Tuesday November 04, 2014 @04:34PM (#8559161)

Who said anything about hashing passwords? But this is a misconception. You don't want a primitive that is slow. You want one that gives you a lot of security margin in few cycles, then you make it slow by, for instance, iterating it many times. There are many password hashing schemes based on BLAKE2, 6 different ones submitted to PHC (https://password-hashing.net/).

[ Parent | on HN ]

Re:How I created two images with the same MD5 hash by smt88 on Tuesday November 04, 2014 @07:54PM (#8559976)

It's sadly common for inexperienced devs to use MD5 and call it a day (if they hash at all).

I just wanted to point out that, for situations where user input and security are important, you want the algorithm to be slow.

I didn't say anything about how to implement it or whether you should use BLAKE2 or what. There's a lot more to it than I could put in a reply here, and even quick Googling would turn up info about salting/iterating/etc.

[ Parent | on HN ]