Questions tagged [md5]

MD5 is a hash function that is no longer considered secure from a cryptographic point of view. Therefore, it should only be used for backward compatibility.

Filter by
Sorted by
Tagged with
4
votes
2answers
467 views

The length extension attack and security on length shortening of a hashed message by one byte

MD5, SHA1, SHA2 are vulnerable to length extension attacks Wikipedia:Length extension attack. Could is also be possible to generate $H(\text{message}[1..n-1])$ from $H(\text{message}[1..n])$ if I know ...
2
votes
1answer
31 views

How can a collision attack using MD5 be used to break WOTS

It is stated in Winternitz One time signature security that MD5 is not safe for Winternitz due to collision attack. Given that WOTS generates multiple, say 32 private keys then hashing them a number ...
0
votes
0answers
40 views

Security implication of concatenating two hashes using different algorithms

Background Hashing files is an expensive thing for CPU. I am tasked to write a secure digital signature scheme. For that, I decided to check the integrity of files using Hash/Digest. To be more secure,...
5
votes
1answer
34 views

Would increasing the “target space” of MD5 collisions make it significantly easier to find a collision?

This is tangential to this question, which asks about generating a file to match an exact MD5 hash. My question is if it would be significantly easier to generate a file that is "within X digits ...
0
votes
0answers
79 views

Combining Hashes - NTLM and SHA

i have been recently learning about different types of hashing and the encryption/decryption methods of such hashes. Im currently trying to find the preimage of this hash i have been given as a ...
1
vote
1answer
26 views

If two hosts are using a transparent IP level authentication and encryption, is their communication subject to both MITM or replay attacks?

Encryption process for any outgoing packet to the specified "remote IP": -original payload P is encrypted (the bytes after the IP header) using RC4 with the preestablished key ...
0
votes
0answers
11 views

Length extension attack in the middle help!

is it possible to insert the command that you want to execute in the middle of the md5 hash token already known?
0
votes
0answers
40 views

How to create two partly similar plaintexts with same MD5 hash value?

The problem I'd like to solve looks like this: There are two plaintexts which differ in length and letters, but contain a few common strings. The first few words and the last few words are the same, ...
0
votes
0answers
38 views

How is the MD5 digest calculated in BGP?

The RFC is very superficial on the implementation details. What is the injective function being used? RFC (ietf) MD5 digest is produced by applying the MD5 algorithm to these items in the following ...
1
vote
1answer
58 views

MD5 hash: retrieve an element of a source string

Suppose you have a string, precisely an MD5 hash string, which basically it is computed in the following way: "element1:element2:element3" So, in order to get ...
0
votes
1answer
76 views

Formula of function in MD5 algorithm

As i read MD5 have many complex formulas, example: $k_i := \lfloor \space| \sin(i + 1) \times 2^{32}| \space\rfloor$ My question is why use sin(), how about cos() or tan() or something like that. ...
1
vote
1answer
538 views

What is the use of encoding a hash output?

In many applications, the MD5 algorithm is used which produces a 128-bit output which is represented as a sequence of 32 hexadecimal digits. This output is further encoded using a base62 or base64 ...
0
votes
0answers
30 views

MD5 padding bit in 0 and 1 [duplicate]

How can I calculate the padding in bits (0,1)? is there is a way to calculate and find all the bits in the padding? and can you please show me an example.
1
vote
1answer
161 views

Can the OpenSSL random number generator be considered cryptographically secure? [duplicate]

The OpenSSL Random Number generator documented here uses an OS-provided entropy source coupled with a MD5 hash function. Does it impact the quality of randomness to use a broken cryptographic hash ...
1
vote
2answers
116 views

Storing email addresses in plain sight

What would be the best approach for storing a list of hardcoded email addresses in plain sight (in a public JS file or such)? The site is pretty low-key, for a small community of friends. Starting ...
0
votes
1answer
342 views

Most efficient way to break md5?

if you know the result of a hash, for this example the resulting hash is: ec664d1d65fd8a58c59b337b11c37a4d And you also know the hash has been made like this: <...
7
votes
0answers
152 views

Are there two known ASCII-only strings which have the same MD5 hash value?

Up to now, the pairs of strings that create an MD5 collision that have been discovered all contain non-ASCII (binary) characters. Are there two known ASCII-only strings which have the same MD5 hash ...
5
votes
2answers
600 views

Is it feasible to get a hash collision for CRC32, MD-5 and SHA-1 on one file?

I'm aware that individually, each has its weaknesses (especially CRC32), but is it feasible that a file could be created to falsely match all three?
7
votes
2answers
2k views

Does a hash function have a Upper bound on input length?

I came across this Answer stating (just a line from the answer):- The input space is "infinite" and thus it has an infinite amount of values that will collide into a single hash And in the ...
42
votes
7answers
2k views

For a hashing function like MD5, how similar can two plaintext strings be and still generate the same hash?

When I say similar, I'm referring to the Hamming distance, the Levenshtein distance, or a similar string distance metric that measures how similar or dissimilar two strings are. For instance, are ...
2
votes
3answers
572 views

Suitable 16-bit checksum?

I am writing a toy1 transport protocol and I am trying to implement a feature whereby: A 16-bit checksum is included in every packet. This checksum can be extended to be 48-bit if the data is large, ...
1
vote
2answers
227 views

Does it matter if I publish only publish good or bad MD5 hashes after recovering from a hack?

(This question is a follow-up from another question I asked about MD5, which is why I'm insisting on using MD5 in this question as well) My imaginary Linux distribution, Sushi Linux has had a big ...
26
votes
8answers
11k views

Is there really no use for MD5 anymore?

I read an article about password schemes that makes two seemingly conflicting claims: MD5 is broken; it’s too slow to use as a general purpose hash; etc The problem is that MD5 is fast I know that ...
0
votes
1answer
64 views

Is OpenSSL HMAC vulnerable to length extesion attacks when using MD5 as hash algorithm?

Given that a valid hash for a specific payload is known, would some C code like this be vulnerable to a length extension attack? ...
1
vote
0answers
107 views

Overcome MD5-RSA Signature verification

I asked this question already at the Information Security SO site, but my research on how to overcome this problem ended always on the crypto site. That's why I will try to find some help here :) I ...
3
votes
1answer
339 views

MD5: Existence of invariant (fixed point)

Is it possible to find 128 bits $B$ such that $md5(B) = B$? md5 has collisions that can be computed in acceptable time, but I did not find any papers on fixed points in md5. As pointed out in this ...
0
votes
1answer
98 views

How does MD5 divide the padded message in 16 words?

This is the image from a website that shows all the steps of the MD5 Hashing algorithm: The original message is 'Hello World!'. I don't understand where these values are coming from: For example the ...
7
votes
1answer
225 views

How did I get a nonuniform distribution of UUID4s across MD5 space?

We have a system that processes data. Each entity has an ID that is generated using uuid4() in Python. Later, that ID is used as a partition key for AWS Kinesis. ...
1
vote
2answers
381 views

Integrity check of a binary firmware file with hash function

I need to provide a mechanism that it is possible to verify the integrity of a firmware image flashed on an embedded system. The procedure should be, that if someone has doubt on the firmware’s ...
-1
votes
1answer
58 views

Add string to create specific MD5?

I have a file that include a long string , I can calc the md5 of this file . Is there any way to know which string I need to add for this file so the md5 of this file will be specific md5 that I want?...
6
votes
2answers
4k views

Using a hash function as a random number generator

Using MD5 or SHA1 for instance, and applying integers (as seed so to speak) to the hash function, in sequence, and only keeping, say, the first 64 bits of the resulting hash, do we always have a ...
0
votes
1answer
75 views

What is the smallest last value of sequence of integers from 1, where there is a collision in md5? [duplicate]

Question is just out of interest. If we take md5 hash from all integers from 1 to n, what is the first n, where its md5 collides with some previous md5? Has anyone ever calculated and proved the ...
1
vote
1answer
463 views

Md5 padding bits

What is the condition if the message size in md5 increses from 448 as the 64 bits are the length and we have to make the block of 512. So what will be the bits if it increases from 448
0
votes
1answer
340 views

Practical attack on md5 hashing algorithm?

I have the following conditions: String which consist of "STRING+key+ID+key" is hashed with md5. I have a knowledge of STRING (10 chars), ID is probabilistic (int 15), key is 15 chars long (a-z A-Z 0-...
2
votes
1answer
2k views

Vulnerabilities of AES method that uses MD5 to create the key

Are there security vulnerabilities given the would a user be able to access the original text and the encrypted text with AES using an MD5 as a key? In other words, if the user had both the original ...
5
votes
1answer
1k views

MD5 - Chosen Prefix Collision Attack

Given 2 messages $m_1$ and $m_2$, in a chosen prefix attack, we want to find $s_1$ and $s_2$ such that: $\text{MD5}(m_1 || s_1) = \text{MD5}(m_2 || s_2)$ Are $s_1$ and $s_2$ found by brute force ...
8
votes
2answers
1k views

Why aren't hash values for “nothing” (empty) defined as all zeros?

Any decent hash algorithm will produce basically "random like" values for any given input including the empty input. For example MD5 produces d41d8cd98f00b204e9800998ecf8427e on an empty input. I ...
-2
votes
1answer
2k views

Cracking MD5, SHA1, SHA256 hashes [closed]

Hey guys i am trying to crack some hashes and it seems to be taking longer then expected (going on 7 days now). I am using John the ripper, I cant use hash cat due to pc limitations. I used online ...
1
vote
1answer
122 views

Are MD5 possibilities really $2^{128}$? [duplicate]

I have a simple question: Are we certain that the md5 hashing algorithm can produce $2^{128}$ different outputs ? If so, how ? Note: Sorry if this has already been asked, I really couldn't find it.
3
votes
3answers
195 views

Two salts, One password

If I have two different MD5 password hashes with two different salts (the salts are known), is there any way to cryptographically deduce if the two passwords match? Other than brute force password ...
4
votes
2answers
442 views

What is the point of using a cryptographic sequence number if you're not using it as a nonce?

OSPF features the use of Auth Crypto Sequence Number however, from reading the RFC it would appear the sequence number is not being used as a nonce. In addition, ...
-1
votes
2answers
493 views

MD5 hash functions to prove integrity of a download

It doesn't take a lot of time on the crypto StackExchange to realise the sentiment around MD5 hash functions is poor. My questions are: If it's such a bad idea to make use of MD5 hash functions why ...
3
votes
4answers
8k views

Can SHA or MD5 results be decrypted?

I have learned that SHA-1 and MD5 are one way hash functions, which means that it is not possible to obtain the original value by performing the reverse calculation. There however some online ...
2
votes
1answer
196 views

What are the specifics behind MD5 being weak against collisions?

I'm not very well-versed in cryptography so bare with me. One thing I see a lot on InfoSec Exchange is this phrase - MD5 is weak against collisions but what I am failing to understand is why. ...
9
votes
2answers
3k views

How many trials does it take to break HMAC-MD5?

I know that you can find collision in MD5 with 2^64 trials using Birthday paradox. Now everyone is saying that HMAC-MD5 is significantly more secure. How can I ...
2
votes
2answers
692 views

Attack MD5 with partial information?

If I generate an MD5 hash from 2 pieces of information – i.e. by concatenating two strings – how easy is it to guess what that hash is, assuming an attacker has knowledge of only 1 piece of those info?...
12
votes
3answers
550 views

Using weak hash functions to construct a stream cipher

I am in the awkward position of developing a secure encryption scheme that provides data-at-rest security for a very limited embedded system. The system is only guaranteed to have 4 MiB of memory (...
1
vote
1answer
164 views

Does public-key + hashing create a security vulnerability?

The title says it all really...let's say I have a packet of data that one of my applications needs to store encrypted with a public key (RSA, say, with the private key kept elsewhere). Let's say the ...
31
votes
4answers
31k views

How can hashes be unique if they are limited in number? [duplicate]

I'm curious, how can for example SHA-256 be unique if there are only a limited number of them?! For clarification: how many MD5 hashes are there? $16^{32}$ MD5 hashes can be produced. $16^{64}$ SHA-...
3
votes
1answer
110 views

Statistical attacks on a list of MD5/SHA-1 hashes?

I have a list of MD5 and SHA-1 hashes where the input string is of the form secret1000 secret1001 … all the way up to ...

1
2 3 4 5