Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

It is well known that MD5 is completely broken today - however, to understand the theory behind the attacks I am looking for an implementation of the collision attacks described in the 2009 paper A New Collision Differential For MD5 With Its Full Differential Path by Tao Xie. DengGuo Feng and FangBao Liu.

Does anyone know of a working implementation I can take a look at?

share|improve this question

migrated from Sep 19 '11 at 20:46

This question came from our site for professional and enthusiast programmers.

This might provide some base for answers: – Paŭlo Ebermann Sep 19 '11 at 20:58
MD5 is only broken for collisions, it's still first and second preimage safe. – Smit Johnth May 22 '13 at 19:36

There is a C implementation here:

share|improve this answer
No, he asked about a specific attack. The link you posted is from 2005. – Marsh Ray Jan 7 '12 at 7:04

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.