Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [md5]

MD5 is a hash function that is no longer considered secure from a cryptographic point of view. Therefore, it should only be used for backward compatibility.

0
votes
1answer
62 views

What is the smallest last value of sequence of integers from 1, where there is a collision in md5? [duplicate]

Question is just out of interest. If we take md5 hash from all integers from 1 to n, what is the first n, where its md5 collides with some previous md5? Has anyone ever calculated and proved the ...
1
vote
1answer
63 views

Md5 padding bits

What is the condition if the message size in md5 increses from 448 as the 64 bits are the length and we have to make the block of 512. So what will be the bits if it increases from 448
0
votes
1answer
84 views

Practical attack on md5 hashing algorithm?

I have the following conditions: String which consist of "STRING+key+ID+key" is hashed with md5. I have a knowledge of STRING (10 chars), ID is probabilistic (int 15), key is 15 chars long (a-z A-Z 0-...
1
vote
1answer
334 views

Vulnerabilities of AES method that uses MD5 to create the key

Are there security vulnerabilities given the would a user be able to access the original text and the encrypted text with AES using an MD5 as a key? In other words, if the user had both the original ...
3
votes
1answer
235 views

MD5 - Chosen Prefix Collision Attack

Given 2 messages $m_1$ and $m_2$, in a chosen prefix attack, we want to find $s_1$ and $s_2$ such that: $\text{MD5}(m_1 || s_1) = \text{MD5}(m_2 || s_2)$ Are $s_1$ and $s_2$ found by brute force ...
7
votes
2answers
226 views

Why aren't hash values for “nothing” (empty) defined as all zeros?

Any decent hash algorithm will produce basically "random like" values for any given input including the empty input. For example MD5 produces d41d8cd98f00b204e9800998ecf8427e on an empty input. I ...
-2
votes
1answer
792 views

Cracking MD5, SHA1, SHA256 hashes [closed]

Hey guys i am trying to crack some hashes and it seems to be taking longer then expected (going on 7 days now). I am using John the ripper, I cant use hash cat due to pc limitations. I used online ...
1
vote
1answer
64 views

Are MD5 possibilities really $2^{128}$? [duplicate]

I have a simple question: Are we certain that the md5 hashing algorithm can produce $2^{128}$ different outputs ? If so, how ? Note: Sorry if this has already been asked, I really couldn't find it.
2
votes
3answers
122 views

Two salts, One password

If I have two different MD5 password hashes with two different salts (the salts are known), is there any way to cryptographically deduce if the two passwords match? Other than brute force password ...
4
votes
2answers
162 views

What is the point of using a cryptographic sequence number if you're not using it as a nonce?

OSPF features the use of Auth Crypto Sequence Number however, from reading the RFC it would appear the sequence number is not being used as a nonce. In addition, ...
0
votes
2answers
223 views

MD5 hash functions to prove integrity of a download

It doesn't take a lot of time on the crypto StackExchange to realise the sentiment around MD5 hash functions is poor. My questions are: If it's such a bad idea to make use of MD5 hash functions why ...
1
vote
4answers
758 views

Can SHA or MD5 results be decrypted?

I have learned that SHA-1 and MD5 are one way hash functions, which means that it is not possible to obtain the original value by performing the reverse calculation. There however some online ...
2
votes
1answer
119 views

What are the specifics behind MD5 being weak against collisions?

I'm not very well-versed in cryptography so bare with me. One thing I see a lot on InfoSec Exchange is this phrase - MD5 is weak against collisions but what I am failing to understand is why. ...
7
votes
2answers
2k views

How many trials does it take to break HMAC-MD5?

I know that you can find collision in MD5 with 2^64 trials using Birthday paradox. Now everyone is saying that HMAC-MD5 is significantly more secure. How can I ...
0
votes
1answer
76 views

MD5 hashing Algorithm

I created a repository on github to write some of the computer security algorithms, and it's time to write MD5 Algorithm, i searched about papers/videos explain the algorithm with examples alongside ...
3
votes
2answers
540 views

Attack MD5 with partial information?

If I generate an MD5 hash from 2 pieces of information – i.e. by concatenating two strings – how easy is it to guess what that hash is, assuming an attacker has knowledge of only 1 piece of those info?...
11
votes
3answers
277 views

Using weak hash functions to construct a stream cipher

I am in the awkward position of developing a secure encryption scheme that provides data-at-rest security for a very limited embedded system. The system is only guaranteed to have 4 MiB of memory (...
1
vote
1answer
70 views

Does public-key + hashing create a security vulnerability?

The title says it all really...let's say I have a packet of data that one of my applications needs to store encrypted with a public key (RSA, say, with the private key kept elsewhere). Let's say the ...
25
votes
4answers
13k views

How can hashes be unique if they are limited in number? [duplicate]

I'm curious, how can for example SHA-256 be unique if there are only a limited number of them?! For clarification: how many MD5 hashes are there? $16^{32}$ MD5 hashes can be produced. $16^{64}$ SHA-...
3
votes
1answer
87 views

Statistical attacks on a list of MD5/SHA-1 hashes?

I have a list of MD5 and SHA-1 hashes where the input string is of the form secret1000 secret1001 … all the way up to ...
1
vote
1answer
34 views

Expanding truly random key into printable password for successive hashing

The STUN network protocol defines its client authorization in the terms of message-integrity check employing the following scheme [RFC5389, section 10.2]: $$ \DeclareMathOperator{\HMAC}{HMAC} \...
1
vote
1answer
153 views

Difficulty of generating a string “The (md5|sha1) hash of this string is (x)” that hashes to (x) vs. regular hash collision between files?

I know that collisions in md5 and sha1 have been demonstrated in particular pairs of files (by incrementing some none viewable portion of a PDF, etc). Would generating the above string be ...
2
votes
1answer
406 views

Salt and pepper at both client and server sides?

Putting aside that it may sound paranoid. I know that many users tend to use the same password on many sites. Then, from an ethical point of view, I should not only be concerned about security breaks ...
1
vote
1answer
181 views

Hash function composition - security level

When using two hash functions, g(x)=SHA-512 and f(x)=MD5 g(x) has 512 bit output (using salt) f(x) has 128 bit output. Let's say that z(x)=f(g(x)) meaning the output is 128 bit long. The Question: ...
0
votes
3answers
383 views

Sign MD5 hash with RSA [duplicate]

I have to hash a message with MD5, digitally sign it, and then verify. I have looked around, but I can't find a step-by-step example. I understand how RSA works when a message is given as number (not ...
1
vote
1answer
229 views

An iso file containing its MD5 hash?

My colleague remembers and old backup tool, packaged as a standard bootable ISO image. He thinks the file was about ~250 MB, containing a MD5SUM.txt, which included the MD5 Checksum of the entire ISO ...
1
vote
1answer
524 views

Getting the key used for HMAC given the hash and the plaintext?

I'm working on a little exercise to understand the drawbacks of poor library choices and I've been presented with the following scenario. The HMAC function in python is being used (md5). I know the ...
5
votes
1answer
1k views

Is it possible to make two files with the same size and the same MD5 and CRC32?

I have seen a lot of different files with the same MD5s. For CRC32 is quite easy to find collision. But is is it possible to make size, and two different hashes the same? I have seen many linux ...
0
votes
0answers
377 views

Why Is XOR of 2 collision resistant hash functions not a collision resistant?

Assume that we have 2 collision resistant hash functions H1 and H2. I think that $H_1(x) \oplus H_2(x')$ is not a collision-resistant hash. Does anyone describe a sussucesfull attack? I read "Can the ...
2
votes
2answers
406 views

Reverse MD5 of a 76 character string when the first 44 characters are known

I have a situation where I would like to reverse a hash which is the MD5 of a concatenation of 76 characters. I know the first 44 characters but don't know the remaining 32 characters. A description ...
1
vote
2answers
112 views

Why does md5_crypt move bytes around?

I looked into the code for md5_crypt the other day (yes, I know it's insecure), and I noticed that after mushing up everything with strange md5 hashes, it generates a base64 string with a strange ...
0
votes
1answer
260 views

Keyspace in truncated MD5 hash?

I have identified a password hashing algorithm that uses a truncated MD5 hash to compare user passwords. This means that any password whose hash matches the same first 23 hex chars (11.5 bytes or 92 ...
0
votes
1answer
888 views

I didn't get the hash length extension attacks

I was trying to solve a cryptography challenge and the problem was about "hash length key extension". After some reading in different topics, I don't know why I still didn't solve the challenge. I ...
0
votes
1answer
3k views

Decoding an MD5 hash where I already know most of the string [closed]

Let's say my friend has made an md5 hash of an email address and sent it to me. The email address will be something like 'jessica_XXXX@gmail.com', and I know it begins with 'jessica_' and ends with '@...
2
votes
1answer
117 views

Unable to implement Client and Server Side Hashing (Validation problem)

I'm trying to implement hashing on both client and server Sides for my web/mobile Application. On the client side, I implemented the slow hashing algorithm (bcrypt) On the server side, I tried to use ...
0
votes
1answer
428 views

MD5 - What happens if message is exactly 64bit block size message?

Based on RFC 1321 after we recive a message if message size is less than 64 Byte we will append it with a 0x80 and message length + zeroes until it's 64 bit and then generate the digest. The question ...
8
votes
1answer
282 views

Would finding a Merkle-Damgård preimage that doesn't change the initial state allow an attacker to prepend it to any hashed message?

Suppose, a message M was found so that MD5(M) = S, where S is the initial state of the MD5 function (0x01234567, ...). Given a hash MD5(m), would this allow computing MD5(M∥m∥padding), where padding ...
15
votes
1answer
5k views

Could we break MD5 entirely in the future?

Even of today MD5 is (sadly) still heavyly used in some applications. Even big tools like ApacheMD5. But even today there are more then enough MD5 hashes which are still not cracked. According to ...
-1
votes
1answer
27 views

Can private hashing techniques be used in MySql 2000 server ? Help me decode this? [closed]

So last night my father gave me my birthday challenge. He made a website and asked me to get admin access there. I don't have any XSS knowledge, so I started with SQL Injection. I tried using SqlMap ...
3
votes
0answers
126 views

Breaking an addition-based cipher with two ciphertexts but no known plaintext

I'm attempting to break a system which uses decryption code functionally equivalent to the following: ...
1
vote
1answer
104 views

Hash functions and polynomial division

I understand that a CRC verifies data integrity by producing a checksum, which is the result of polynomial long division. I've heard hash values referred to as hash checksums, so my question is ...
3
votes
1answer
1k views

What does “bits” mean in the context of hash functions?

What does the "bits" in hash functions mean? I started studying hash functions but I still do not understand what the bits means. What does it mean to say that MD5 is 128-bits or that SHA-1 is 160 ...
7
votes
3answers
3k views

Is a password cyphered by itself as secure as hash?

My Question(s) I am wondering if I have a password (long enough) and I cypher it by itself (let's ignore the salt) in this way: ...
0
votes
1answer
405 views

(Re) How to validate AES decryption was successful?

I'm developing a local file encryption/decryption software (AES-256 CBC), which I want to validate decryption was successful or not. so I decided to add an additional MD5 hash of plain data to end of ...
-6
votes
2answers
192 views

Ignorant Biologist in need of AES-128 CBC PKCS5 encryption key

I'm a biologist frantically trying to understand the world of cryptography overnight for research- please ignore my ignorance. I was given a large body of text to crack that is encrypted with AES-128 ...
-3
votes
1answer
155 views

Help in decrypting this message: “e811339cf0258d2977fdefcd110c0e17daa5de81”? [closed]

Here are some details: I was given was a text that was converted into hexadecimal, then hashed via MD5, then hashed via SHA-1. That’s all I know about it. Any help is really appreciated. There is ...
1
vote
0answers
109 views

Reasons of the choice of padding scheme

Can you explain me what is the reason of the difference between MD5 and SHA-3 padding schemes? - MD5 has a padding scheme: 10*-message length 64 bit- - SHA-3 has a padding scheme: 10*1 Why they use ...
0
votes
0answers
21 views

Hash Length Extension Attack Specifics [duplicate]

Is a hash implementation with a secret involved still vulnerable if the secret is appended at the end of the string instead of prepended? For example, I know a hash implementation is vulnerable if it ...
0
votes
0answers
852 views

different md5sum for same file

I came across a file for which the md5sum from website https://onlinemd5.com/ is different from md5sum in other websites and my linux system,now say the website is using wrong algorithm i have tested ...
4
votes
1answer
183 views

Is HMAC-MD5 collision-resistant if the key is unknown?

I'm in a situation where I need to use HMAC-MD5 (for a learning, non-production application) and it needs to be collision-resistant. So my question: Is HMAC-MD5 collision-resistant if the key is ...