Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 414

a cryptographic hash function with a 128-bit (16-byte) output, now deprecated

5 votes
Accepted

MD4 or MD5 speed depends on data or just on data size?

As far as performance is concerned, the time to compute an MD5 hash or any other cryptographic hash depends solely on the number of bytes. It doesn't matter what the bytes are. … Hash comparisons, yes (when comparing two MD5 hashes, one of which is secret, you should compare all 16 bytes and not stop at the first difference). …
Gilles 'SO- stop being evil''s user avatar
1 vote
Accepted

Is md5(data + key) secure if a proper hmac function isn't available?

No, md5(data+key) is not secure. MD5 is vulnerable to dirt cheap collision attacks. … However, it has other weaknesses, in particular a length extension attack which allows finding a specific md5(key+data2) from md5(key+data1). …
Gilles 'SO- stop being evil''s user avatar
37 votes

SHA & MD5 Collisions for shorter strings

I understand that md5 and sha512, etc... are insecure because they can have collisions. No, this is wrong. MD5 and SHA-1 are insecure because it is possible in practice to find collisions. … By the way, MD5 is actually a 16-byte hash. …
Gilles 'SO- stop being evil''s user avatar
7 votes

Shall I need to use MD5 algorithm in both JavaScript and PHP for login authentication?

If you first take the MD5 of the password and send that to the server, then the MD5 effectively becomes the password: if the attacker finds the MD5, they would be able to log in, without needing to find … what it is the MD5 of. …
Gilles 'SO- stop being evil''s user avatar
9 votes
Accepted

MD5 brute force on a faulty hash?

So your proposal can do nothing against the known defects of MD5. If you modify an MD5 hash, then it could become harder to find a message with the hash. … If you're using MD5 it as a password hash, then MD5 is not your only problem, or your main problem. For a password hash, brute force searches are a concern. …
Gilles 'SO- stop being evil''s user avatar
2 votes

Disguising the type of hash used

Notice that the actual hash is 16 bytes, check that it's MD5, and, depending on the attacker's mentality, either be happy to have spent so little time cracking that site or be disappointed that it was …
Gilles 'SO- stop being evil''s user avatar
16 votes
Accepted

Which hashing algorithm shoud I use for a safe file checksum?

More precisely, for both of these hashes, it is possible to find collisions: it is possible to find two documents D1 and D2 such that MD5(D1) = MD5(D2) (or SHA-1(D1) = SHA-1(D2)), and such that D1 and … Since there's risk in using MD5, and zero benefit compared to using SHA-256, use SHA-256. …
Gilles 'SO- stop being evil''s user avatar