Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

It is well known that MD5 is completely broken today - however, to understand the theory behind the attacks I am looking for an implementation of the collision attacks described in the 2009 paper A New Collision Differential For MD5 With Its Full Differential Path by Tao Xie. DengGuo Feng and FangBao Liu.

Does anyone know of a working implementation I can take a look at?

share|improve this question

migrated from stackoverflow.com Sep 19 '11 at 20:46

This question came from our site for professional and enthusiast programmers.

This might provide some base for answers: mathstat.dal.ca/~selinger/md5collision –  Paŭlo Ebermann Sep 19 '11 at 20:58
MD5 is only broken for collisions, it's still first and second preimage safe. –  Smit Johnth May 22 '13 at 19:36

1 Answer 1

There is a C implementation here: http://packetstormsecurity.org/files/41548/md5coll.c.html

share|improve this answer
No, he asked about a specific attack. The link you posted is from 2005. –  Marsh Ray Jan 7 '12 at 7:04

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.