• bloubz
    link
    fedilink
    English
    arrow-up
    3
    ·
    5 months ago

    It’s definitely the easiest. But that’s why we stopped using it, because it’s proven we can have collision so it may be possible to generate a match on a real life file. I’m not sure about where we’re at on this in research (if there’s any)

    Also I was actually not trying to make a point, just pointing on md5 as a joke

    • TrudeauCastroson [he/him]@hexbear.net
      link
      fedilink
      English
      arrow-up
      3
      ·
      5 months ago

      If you’re using any hash smaller than your file (not just md5), then it’s always possible to have 2 different files that match. This is just from pigeonhole principle. No matter what you use there will be collision.

      md5 is just bad because it’s small so it’s easier to generate this match. It’s also a question of how easy is it to reverse engineer a match, which apparently md5 is worse for on pictures than I expected.