Collaborate Disseminate
I am taking a security class and part of an assignment this week is to crack a given MD5 hash.
All the professor has given us for this task is the hash, the knowledge that the password is 6 or 7 keystrokes, and that it might contain the nu… Continue reading Cracking an MD5 password with little info to go off of
Latest episode – listen now! Continue reading S3 Ep120: When dud crypto simply won’t let go [Audio + Text]
Enjoy our Serious Security deep dive into this real-world example of why cryptographic agility is important! Continue reading Serious Security: The Samba logon bug caused by outdated crypto
Any detail on what that Windows CryptoAPI vulnerability exactly is?
It’s said to allow
MD5-collision certificate spoofing
and Microsoft is quoted as stating:
An attacker could manipulate an existing public X.509 certificate to spoof the… Continue reading Details on CVE-2022-34689 Windows CryptoAPI Spoofing Vulnerability? [closed]
I’ve been playing with a CUDA MD5 cracker which is very impressive indeed.
For a novelty project, I’d like to make a file that contains the last 32 bits of it’s own hash.
I’d like to achieve this by starting the MD5 in an initial state tha… Continue reading Brute force (last 32 bits of) MD5 with salt [closed]
I need to utilize the UUID datatype (128bit) for storing my hashes. The goal is to be able quickly calculate/identify different records by comparing it rather than millions of 1-10k char long strings. So the goal here is not the security (… Continue reading What is the hash method producing 128-bit output (32 hex chars) with lowest collision likelyhood? [migrated]
It’s not just the hashing, by the way. It’s the salting and the stretching, too! Continue reading Serious Security: MD5 considered harmful – to the tune of $600,000
What kind of security do you suggest for this case?
What do you think is the security flow?
It is happening in a web which download a PDF document, inside the document has a QR code. This QR code has a URL to the same web page, but display… Continue reading What kind of security is it? Base64/MD5. Key with 22 characters and 32 characters
TL;DR
Does hashing a MD5 digest with a private key, then XOR[ing] the digest (twice recursively, with offset) have any glaring issues? Would this mean MD5 is predictable?
Is partial MD5 recognition possible?
General Overview
I convinced my… Continue reading Hashing a MD5 digest with a private key, then XOR[ing] the digest and private key [migrated]
I have a hash H1 and a password P1. The hash is MD5. I have another hash H2 without a password. Can I leverage my knowledge of H1 and P1 to get a key? can I use this key to decrypt H2? Are there recommended tools? Thanks!