4 ms·
> Md5 is useless in anything remotely related to security There are serious flaws with MD5, and I would never recommend its use today. But there is no known at
by TillE 12y ago
> Md5 is useless in anything remotely related to security
There are serious flaws with MD5, and I would never recommend its use today. But there is no known attack that can generate a malicious binary with an arbitrary hash. The attacker needs to control both files to generate collisions, which is a huge limitation.
Maybe those attacks will exist some day. But I wouldn't be setting fire to all your legacy software without first understanding exactly how they use MD5, and if that is vulnerable to any known attack.
- yuhong 12y agoI think with practical chosen prefix attacks this may have changed.
- astrodust 12y agoGiven there are SHA256 engines that produce terahashes per second, you could probably do tens to hundreds of terahashes depending on sophistication. At that point even a sloppy brute-force approach would have a high probability of a collision on at least one key of a sufficiently large key-set. Against a specific target it may or may not be viable.