3 ms·

Well, even MD4 hasn't been cracked yet.

• kbolino 2y ago
  What is your definition of cracked? Collisions are easy to produce; there's one right on the Wikipedia page.
  • EVa5I7bHFq9mnYK 2y ago
    Collisions are not interesting. Millions of leaked passwords hashed with MD4/MD5 are of very practical interest.
    • deleted 2y ago
      [deleted]
    • kbolino 2y ago
      Ok, preimage resistance is still pretty strong, but it has been reduced enough that I wouldn't trust it remaining above practical attacks beyond the next decade.
    • lo0dot0 2y ago
      If you use the same password on different sites despite password managers and now passkeys you are asking for it.