12 Facts About MD5

1.

MD5 message-digest algorithm is a cryptographically broken but still widely used hash function producing a 128-bit hash value.

FactSnippet No. 1,647,222
2.

MD5 was designed by Ronald Rivest in 1991 to replace an earlier hash function MD4, and was specified in 1992 as RFC 1321.

FactSnippet No. 1,647,223
3.

MD5 fails this requirement catastrophically; such collisions can be found in seconds on an ordinary home computer.

FactSnippet No. 1,647,224
4.

On 31 December 2008, the CMU Software Engineering Institute concluded that MD5 was essentially "cryptographically broken and unsuitable for further use".

FactSnippet No. 1,647,225
5.

The weaknesses of MD5 have been exploited in the field, most infamously by the Flame malware in 2012.

FactSnippet No. 1,647,226
6.

MD5 is one in a series of message digest algorithms designed by Professor Ronald Rivest of MIT.

FactSnippet No. 1,647,227
7.

Bruce Schneier wrote of the attack that "we already knew that MD5 is a broken hash function" and that "no one should be using MD5 anymore".

FactSnippet No. 1,647,228
8.

MD5 uses the Merkle–Damgard construction, so if two prefixes with the same hash can be constructed, a common suffix can be added to both to make the collision more likely to be accepted as valid data by the application using it.

FactSnippet No. 1,647,229
9.

MD5 digests have been widely used in the software world to provide some assurance that a transferred file has arrived intact.

FactSnippet No. 1,647,230
10.

Historically, MD5 has been used to store a one-way hash of a password, often with key stretching.

FactSnippet No. 1,647,231
11.

MD5 is used in the field of electronic discovery, to provide a unique identifier for each document that is exchanged during the legal discovery process.

FactSnippet No. 1,647,232
12.

MD5 algorithm is specified for messages consisting of any number of bits; it is not limited to multiples of eight bits.

FactSnippet No. 1,647,233