Re: [ANN] MD5 1.0.2 Released (OT)

[Gé Weijers <ge@...>]

If an attacker can gain something by crafting two different files that have the same MD5 hash I'd worry about it, otherwise I'd go on using MD5 for that purpose. MD4 would be OK too.

On May 9, 2007, at 10:19 AM, Philippe Lhoste wrote:

Richter wrote:

MD5 is not as bad as this may sound. 

One (frequent?) use of MD5 is to compute a hash value for files and use it for fast comparison (duplicates, is this file changed?, and so on).

I suppose that for this use, it is still OK, at worse involving a binary comparison to be sure (for some uses).

-- 

Philippe Lhoste

--  (near) Paris -- France

--  http://Phi.Lho.free.fr

--  --  --  --  --  --  --  --  --  --  --  --  --  --

--

Gé Weijers

ge@weijers.org