# Tag Info

## New answers tagged md5

2

MD5 is a Merkle–Damgård hash, so it's vulnerable to the length extension attack. That means there's a simple way to find multicollisions using any algorithm that can find collisions for an arbitrary IV: Find some collision $\operatorname{MD5}(a) = \operatorname{MD5}(b)$ using the normal IV. Find another collision \$\operatorname{MD5}'(c) = ...

Top 50 recent answers are included