Skip site navigation (1) Skip section navigation (2)

Re: md5 collision generator

From: Wim Bertels <wim(dot)bertels(at)khleuven(dot)be>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: pgsql-admin(at)postgresql(dot)org
Subject: Re: md5 collision generator
Date: 2005-11-16 17:31:02
Message-ID: 1132162262.9204.3.camel@localhost.localdomain (view raw or flat)
Thread:
Lists: pgsql-admin
On Wed, 2005-11-16 at 10:29 -0500, Tom Lane wrote:
> Wim Bertels <wim(dot)bertels(at)khleuven(dot)be> writes:
> > the sourcecode of a md5 collision generator has been released,
> > it takes about 45 minutes to generate.
> > ..so to an "eve" with this knowledge md5 is almost the same as plain text..
> 
> Really?
> 
> The fact that you can construct pairs of strings with matching md5
> hashes does not mean that you can find a string with the same md5 hash
> as a given string.
> 
> The existence of this algorithm is disturbing, since it implies that MD5
> is weaker than people thought, but it IS NOT a useful password cracker,
> and there's no reason for immediate panic.

agreed, the given "picture" was too simple

> 
> 			regards, tom lane


In response to

Responses

pgsql-admin by date

Next:From: Matthew D. FullerDate: 2005-11-16 17:43:10
Subject: Re: md5 collision generator
Previous:From: Tom LaneDate: 2005-11-16 17:25:19
Subject: Re: ERROR: could not read block

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group