atom feed28 messages in org.freebsd.freebsd-securityReport of collision-generation with MD5
FromSent OnAttachments
David WolfskillAug 18, 2004 10:24 am 
Peter C. LaiAug 18, 2004 11:02 am 
ClaudiuAug 18, 2004 11:08 am 
Mike TancsaAug 18, 2004 11:16 am 
Peter C. LaiAug 18, 2004 11:26 am 
Peter C. LaiAug 18, 2004 11:29 am 
mari...@ipad.com.brAug 18, 2004 12:26 pm 
Matthew SeamanAug 18, 2004 1:35 pm 
Chris DohertyAug 18, 2004 1:54 pm 
Brett GlassAug 18, 2004 4:46 pm 
Fernando GleiserAug 18, 2004 5:22 pm 
Borja MarcosAug 19, 2004 1:15 am 
Borja MarcosAug 19, 2004 2:45 am 
Jan GrantAug 19, 2004 3:28 am 
TigAug 19, 2004 7:48 am 
Poul-Henning KampAug 19, 2004 7:53 am 
Mohacsi JanosAug 19, 2004 8:40 am 
George F. CostanzoAug 19, 2004 4:12 pm 
gu...@device.dyndns.orgAug 25, 2004 12:56 pm 
Brooks DavisAug 25, 2004 1:21 pm 
Scott GerhardtAug 25, 2004 3:07 pm 
Mohacsi JanosAug 26, 2004 12:46 am 
Peter JeremyAug 26, 2004 1:09 am 
Oliver EikemeierAug 26, 2004 1:39 am 
Neo-VortexAug 26, 2004 1:54 am 
Jan GrantAug 26, 2004 6:41 am 
Chuck SwigerAug 26, 2004 1:19 pm 
Oliver EikemeierAug 26, 2004 3:08 pm 
Subject:Report of collision-generation with MD5
From:Brett Glass (bre@lariat.org)
Date:Aug 18, 2004 4:46:38 pm
List:org.freebsd.freebsd-security

At 02:54 PM 8/18/2004, Chris Doherty wrote:

what you can do, if you have a proper attack formula, is find *a* message that produces *that one hash*. that is, if I have message M which produces hash H, I can use the attack to find *a* message M' which will also produce hash H.

The thing is, passwords are short and have limited entropy. Chances are, if you find a password that produces the same hash, it's M.

--Brett