Timeline for Is MD5 second-preimage resistant when used only on FIXED length messages?
Current License: CC BY-SA 3.0
16 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 15, 2016 at 12:33 | history | edited | otus |
edited tags
|
|
| Feb 11, 2014 at 18:31 | vote | accept | jcea | ||
| Feb 4, 2014 at 16:17 | comment | added | Stephen Touset | The source code for blake2b is short, freely available, and easily embedded in any project. | |
| Feb 4, 2014 at 1:34 | history | tweeted | twitter.com/#!/StackCrypto/status/430514759163973632 | ||
| Feb 4, 2014 at 1:11 | comment | added | jcea | @StephenTouset Easy availability is required too. MD5 is available everywhere and for every language needed here. But yet, SHA3 last round candidates could be options to consider. Anyway, the original question is still interesting even if theoretical. But thanks for the suggestion. | |
| Feb 4, 2014 at 0:52 | comment | added | Stephen Touset | If performance is a concern, why not use blake2b? It's faster than MD5, and even natively supports tree hashing. | |
| Feb 3, 2014 at 19:51 | answer | added | Thomas Pornin | timeline score: 18 | |
| Feb 3, 2014 at 18:18 | history | edited | fgrieu♦ | CC BY-SA 3.0 |
Improve title
|
| Feb 3, 2014 at 18:01 | comment | added | jcea | @fgrieu, I need second preimage resistance, with the additional constrain of fixed size block (4096 and 16384 bytes, in my case). | |
| Feb 3, 2014 at 17:48 | comment | added | jcea | @fgrieu, feel free to edit the title. | |
| Feb 3, 2014 at 17:47 | comment | added | jcea | I need crypto strength. Being able to forge a 4096 bytes block with given MD5 would be catastrophic. | |
| Feb 3, 2014 at 17:16 | comment | added | user4982 | On '09, the best answer to a question regarding MD5 pre-image resistance was that it is not considered safe to use MD5 for such use. Collision resistance is worse. If you merely want a good non-cryptographic hash with convenient 128-bit digest size, MD5 may meet your needs. | |
| Feb 3, 2014 at 16:53 | comment | added | jcea | I think that the questions is clear enough: can I generate a 4096 bytes block, given a know 4096 bytes block and its MD5 hash, that has the same MD5 hash? :) | |
| Feb 3, 2014 at 16:38 | review | First posts | |||
| Feb 3, 2014 at 16:43 | |||||
| Feb 3, 2014 at 16:25 | history | edited | Cryptographeur | CC BY-SA 3.0 |
Cleanup as per site standards & norms (see FAQ,meta etc) (eg removed 'thanks')
|
| Feb 3, 2014 at 16:18 | history | asked | jcea | CC BY-SA 3.0 |