3 ms·

"MD5 is not broken for the usage that you think it's broken for." Correct; it's broken for everything since we've got the computational power to make it essent

• Xylakant 10y ago
  That's not entirely true. It's broken in the sense that for every hash given we can compute an input that produces this hash. Constructing a useful input (in this case a working exploit) is much less trivial. The complexity depends significantly on what the desired input should look like. It's easier for input that have the property that they can ignore chunks of the input (googles PDF example), but still hard for others.
  • megadollar 10y ago
    We cannot produce an input that produces an arbitrary given hash. Here's an easy counterexample: the all-zeroes md5sum. That's an even harder problem than the one I've claimed is entirely not solved. MD5 is still preimage and second-preimage resistant.