[Friendly Attack Request] How fast can someone crack MD5?

worsel_at_c112927lin.svinfra.compuware.com
Date: 06/08/04 

Date: 8 Jun 2004 08:43:37 -0400

How effective is MD5 in practice?

This is an invitation for a friendly attack to get a sample
of how fast an MD5 of a casual passphrase can be cracked.

> Please try to crack the following, and let me know how you succeed.

> MD5:237f85e882aaa0e342260e21d9021242
> bash> read -esp "Passwd: " P;Q="$(md5sum<<<"$P"|cut -d' ' -f1)";P='';echo $Q

> The passphrase is a proper single sentence of 20 to 25 words,
> describing a well-known event from "The Hobbit" by J.R.R. Tolkein. It
> contains only printable characters before a terminating linefeed, no
> mispellings, and uses ordinary punctuation. It contains proper nouns and
> a number.

The race is on, 

--

Relevant Pages

  • Re: SHA-1 vs. triple-DES for password encryption?
    ... even if the attack wasn't practical. ... > somehow break MD5 that was not done since 1992? ... >>> the hash algorithms as MD5 and MD4. ... >> than you would of SHA1 to get the difficulty up to the same level. ...
    (SecProg)
  • [REVS] Multiple Collisions attack on MD5 and other Hashing Algorithms
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... This collision attack might someday introduce a weakness in MD5 ... The presented attack can find many real collisions which are ...
    (Securiteam)
  • Re: MD5CRK is now LIVE
    ... >> We agree that a collision does not help against a password system. ... >> In the case of a contract, the attack won't work on a document ... note that unless MD5CRK is setup right from the start ... Anyone relying on the difficulty to find MD5 collision ...
    (sci.crypt)
  • Re: SHA-1 vs. triple-DES for password encryption?
    ... > birthday attack succeeds with probability 0.5 or 50%. ... > full MD5. ... > theoretical cryptographers call an "attack" create FUD on this issue. ... Note that you are correct in saying that SHA1 is of the same family as ...
    (SecProg)
  • Re: Lost password + MD5 ?
    ... >> hash M, and being able to produce a different plaintext B that has the ... which MD5 attack are you referring to? ...
    (comp.lang.php)
Quantcast