| From: | Wim Bertels <wim(dot)bertels(at)khleuven(dot)be> |
|---|---|
| To: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
| Cc: | pgsql-admin(at)postgresql(dot)org |
| Subject: | Re: md5 collision generator |
| Date: | 2005-11-16 17:31:02 |
| Message-ID: | 1132162262.9204.3.camel@localhost.localdomain |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-admin |
On Wed, 2005-11-16 at 10:29 -0500, Tom Lane wrote:
> Wim Bertels <wim(dot)bertels(at)khleuven(dot)be> writes:
> > the sourcecode of a md5 collision generator has been released,
> > it takes about 45 minutes to generate.
> > ..so to an "eve" with this knowledge md5 is almost the same as plain text..
>
> Really?
>
> The fact that you can construct pairs of strings with matching md5
> hashes does not mean that you can find a string with the same md5 hash
> as a given string.
>
> The existence of this algorithm is disturbing, since it implies that MD5
> is weaker than people thought, but it IS NOT a useful password cracker,
> and there's no reason for immediate panic.
agreed, the given "picture" was too simple
>
> regards, tom lane
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Matthew D. Fuller | 2005-11-16 17:43:10 | Re: md5 collision generator |
| Previous Message | Tom Lane | 2005-11-16 17:25:19 | Re: ERROR: could not read block |