|
|
|||||||||
|
|||||||||
| |||||||||
|
|
|
| ||||||||||||||||||||||||||
![]() |
|
|
«
Previous Thread
|
Next Thread
»
|
Thread Tools | Search this Thread | Rate Thread | Display Modes |
|
#1
|
||||
|
||||
|
Can we trust MD5 anymore?
http://eprint.iacr.org/2004/199.pdf
Looks like people can break MD4, MD5, SHA-1 and RIPEMD. I still can't read the language of mathematics well enough so that I could say if that's true or gibberish. People who can, what do you say? |
|
#2
|
|||
|
|||
|
RE: Can we trust MD5 anymore?
Thanks for pointing this out. This can be a potential threat because so many things depends on MD5 algorithm.
Like this article says it's a time to move to a betterr hash function but there is no need to worry about security of MD5 now. |
|
#3
|
|||
|
|||
|
RE: Can we trust MD5 anymore?
Plus there's always the threat of brute-force attacks nomatter what hash you use, in that case its just a matter of computing power.
a md5 hash around 4 letters can take a few minutes, but a hash thats 7 letters can take a few days. I'd say your best bet is to do a double md5 hash(one hash over the other) thats way itll look like a 16 bit password that will take a few weeks(unless there are colisions) make sure u use a salt though, cuz if anyone catches on itll be easy to make a different brute-force prog that double hashes... the chances that ur md5 is going to be found and that someone think its importaint enough to mess with is low, so i would just stay with plain md5, its always a good idea to use salts to prevent mass dictionary attacks, those can find a password in a few seconds or a few minutes depending on the size of the password. |
![]() |
| Viewing: Codewalkers Forums > Other Technologies > Programming Theory > Can we trust MD5 anymore? |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|
|
|
|