Search Results
Search type | Search syntax |
---|---|
Tags | [tag] |
Exact | "words here" |
Author |
user:1234 user:me (yours) |
Score |
score:3 (3+) score:0 (none) |
Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
Views | views:250 |
Code | code:"if (foo != bar)" |
Sections |
title:apples body:"apples oranges" |
URL | url:"*.example.com" |
Saves | in:saves |
Status |
closed:yes duplicate:no migrated:no wiki:no |
Types |
is:question is:answer |
Exclude |
-[tag] -apples |
For more details on advanced search visit our help page |
a cryptographic hash function with a 128-bit (16-byte) output, now deprecated
5
votes
Accepted
MD4 or MD5 speed depends on data or just on data size?
As far as performance is concerned, the time to compute an MD5 hash or any other cryptographic hash depends solely on the number of bytes. It doesn't matter what the bytes are. … Hash comparisons, yes (when comparing two MD5 hashes, one of which is secret, you should compare all 16 bytes and not stop at the first difference). …
1
vote
Accepted
Is md5(data + key) secure if a proper hmac function isn't available?
No, md5(data+key) is not secure. MD5 is vulnerable to dirt cheap collision attacks. … However, it has other weaknesses, in particular a length extension attack which allows finding a specific md5(key+data2) from md5(key+data1). …
37
votes
SHA & MD5 Collisions for shorter strings
I understand that md5 and sha512, etc... are insecure because they can have collisions.
No, this is wrong. MD5 and SHA-1 are insecure because it is possible in practice to find collisions. … By the way, MD5 is actually a 16-byte hash. …
7
votes
Shall I need to use MD5 algorithm in both JavaScript and PHP for login authentication?
If you first take the MD5 of the password and send that to the server, then the MD5 effectively becomes the password: if the attacker finds the MD5, they would be able to log in, without needing to find … what it is the MD5 of. …
9
votes
Accepted
MD5 brute force on a faulty hash?
So your proposal can do nothing against the known defects of MD5.
If you modify an MD5 hash, then it could become harder to find a message with the hash. … If you're using MD5 it as a password hash, then MD5 is not your only problem, or your main problem. For a password hash, brute force searches are a concern. …
2
votes
Disguising the type of hash used
Notice that the actual hash is 16 bytes, check that it's MD5, and, depending on the attacker's mentality, either be happy to have spent so little time cracking that site or be disappointed that it was …
16
votes
Accepted
Which hashing algorithm shoud I use for a safe file checksum?
More precisely, for both of these hashes, it is possible to find collisions: it is possible to find two documents D1 and D2 such that MD5(D1) = MD5(D2) (or SHA-1(D1) = SHA-1(D2)), and such that D1 and … Since there's risk in using MD5, and zero benefit compared to using SHA-256, use SHA-256. …