MD5

E192654

MD5 is a widely known but now cryptographically broken 128-bit hash function formerly used for checksums, data integrity, and security applications.

All labels observed (2)

Label Occurrences
MD5 canonical 4
RFC 1321 1

How this entity was disambiguated

Statements (49)

Predicate Object
instanceOf checksum algorithm
cryptographic hash function
hash function
alsoKnownAs Message-Digest Algorithm 5
basedOn MD4
bitLength 128-bit
blockSize 512 bits
category broken hash function
collisionComplexity significantly lower than 2^64
collisionFirstPublicBreakYear 2004
collisionResistance broken
designedBy Ronald Rivest
linked to: Ronald L. Rivest
designer Ronald Rivest
linked to: Ronald L. Rivest
digestSize 128 bits
discouragedBy security standards bodies
follows Merkle–Damgård construction
formerUse X.509 certificates
digital signatures
file integrity checking
message authentication codes
software distribution checksums
hasDigestRepresentation 32-character hexadecimal string
hashFunctionFamily MDx family
introducedBy RSA Data Security, Inc.
linked to: RSA Security
notRecommendedFor TLS certificates
linked to: X.509 certificates

digital signatures
new security protocols
password hashing
operatesOn arbitrary-length input
outputSize 128 bits
preimageResistance weakened
produces fixed-length hash value
publicationYear 1992
recommendedFor non-cryptographic checksums only
replacedBy SHA-2
SHA-3
linked to: Keccak
secondPreimageResistance weakened
specifiedIn RFC 1321
standardizedIn RFC 1321
linked to: MD5
status cryptographically broken
successorOf MD4
usedIn legacy systems
uses bitwise operations
modular addition
nonlinear functions
vulnerableTo chosen-prefix collision attacks
collision attacks
length extension attacks
wordSize 32 bits

How these facts were elicited

Referenced by (5)

Full triples — surface form annotated when it differs from this entity's canonical label.

CRAM-MD5 usesAlgorithm MD5
MD5 standardizedIn RFC 1321
linked to: MD5