MD5 is dead?

[Kurt Seifried < kurt@seifried.org >]

https://twitter.com/angealbertini/status/1074580347650756608

https://github.com/corkami/pocs/blob/master/collisions/README.md

Current status - as of December 2018 - of known attacks:

• get a file to get another file's hash or a given hash:  impossible

  • it's still even  not practical  with MD2.
  • works for simpler hashes(*)

• get 2 different files with the same MD5:  instant

  • examples:  1  &  2

• make 2 arbitrary files get the same MD5:  a few hours  (72 hours.core)

  • examples:  1  &  2

• make 2 arbitrary files of specific file formats (PNG, JPG, PE...) get the same MD5:  instant

  • read below

• get two different files with the same SHA1: 6500 years.core

  • get two different PDFs with the same SHA-1 to show a different picture:  instant  (the prefixes are already computed)

--

Kurt Seifried
kurt@seifried.org