{"id":876,"date":"2004-08-20T11:36:07","date_gmt":"2004-08-20T15:36:07","guid":{"rendered":"\/?p=876"},"modified":"2024-03-22T08:55:20","modified_gmt":"2024-03-22T12:55:20","slug":"md5-collision","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2004\/08\/20\/md5-collision\/","title":{"rendered":"MD5 Collision"},"content":{"rendered":"<p>\n<a href=\"http:\/\/www.nedbatchelder.com\/blog\/200408.html#e20040819T141724\">Ned Batchelder<\/a>:\n<\/p>\n\n<blockquote cite=\"http:\/\/www.nedbatchelder.com\/blog\/200408.html#e20040819T141724\">\n<p>Looks like the venerable MD5 cryptographic hash has developed a\ncrack: <a\nhref=\"http:\/\/www.rtfm.com\/movabletype\/archives\/2004_08.html#001055\">A\nreal MD5 collision<\/a>. A team has published two different input\nstreams which hash to the same MD5 value. Of course, because of the <a\nhref=\"http:\/\/www.ma.umist.ac.uk\/avb\/Pigeon.html\">pigeonhole<\/a> <a\nhref=\"http:\/\/mathworld.wolfram.com\/PigeonholePrinciple.html\">principle<\/a>, everyone knew this had to happen. But no one had ever found a pair\nbefore. <\/p>\n<\/blockquote>\n\n<p id=\"md5-collision-update-2024-03-22\">Update (2024-03-22): <a href=\"https:\/\/twitter.com\/realhashbreaker\/status\/1770161965006008570\">Marc Stevens<\/a> (via <a href=\"https:\/\/news.ycombinator.com\/item?id=39760797\">Hacker News<\/a>):<\/p>\n<blockquote cite=\"https:\/\/twitter.com\/realhashbreaker\/status\/1770161965006008570\">\n<p>Here is a 72-byte alphanum MD5 collision with 1-byte difference for fun[&#8230;] This is the first md5 collision with only printable ascii that I know of.<\/p>\n<\/blockquote>\n\n<p><a href=\"https:\/\/twitter.com\/David3141593\/status\/1573218394358386688\">David Buchanan<\/a> (via <a href=\"https:\/\/news.ycombinator.com\/item?id=32956964\">Hacker News<\/a>):<\/p>\n<blockquote cite=\"https:\/\/twitter.com\/David3141593\/status\/1573218394358386688\">\n<p>The image in this tweet displays its own MD5 hash.<\/p>\n<p>[&#8230;]<\/p>\n<p>This was particularly tricky to make work because the image data in a PNG needs to have a valid adler32 checksum, <em>and<\/em> a valid crc32 checksum.<\/p>\n<\/blockquote>","protected":false},"excerpt":{"rendered":"<p>Ned Batchelder: Looks like the venerable MD5 cryptographic hash has developed a crack: A real MD5 collision. A team has published two different input streams which hash to the same MD5 value. Of course, because of the pigeonhole principle, everyone knew this had to happen. But no one had ever found a pair before. Update [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"apple_news_api_created_at":"2024-03-22T12:41:44Z","apple_news_api_id":"0dd6c91c-14c2-4997-8a1c-c84317a64777","apple_news_api_modified_at":"2024-03-22T12:55:23Z","apple_news_api_revision":"AAAAAAAAAAAAAAAAAAAAAQ==","apple_news_api_share_url":"https:\/\/apple.news\/ADdbJHBTCSZeKHMhDF6ZHdw","apple_news_coverimage":0,"apple_news_coverimage_caption":"","apple_news_is_hidden":false,"apple_news_is_paid":false,"apple_news_is_preview":false,"apple_news_is_sponsored":false,"apple_news_maturity_rating":"","apple_news_metadata":"\"\"","apple_news_pullquote":"","apple_news_pullquote_position":"","apple_news_slug":"","apple_news_sections":"\"\"","apple_news_suppress_video_url":false,"apple_news_use_image_component":false,"footnotes":""},"categories":[4],"tags":[678],"class_list":["post-876","post","type-post","status-publish","format-standard","hentry","category-programming-category","tag-md5"],"apple_news_notices":[],"_links":{"self":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/876","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/comments?post=876"}],"version-history":[{"count":4,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/876\/revisions"}],"predecessor-version":[{"id":42605,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/876\/revisions\/42605"}],"wp:attachment":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/media?parent=876"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/categories?post=876"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/tags?post=876"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}