Report of collision-generation with MD5

Wed Aug 18 19:23:49 PDT 2004

> > And yet, we still have vendors that ship crypt()'ed passwords today.
> 
> Who could possibly ever need a password longer than eight characters?

I've been pondering setting up a DES hash to cleartext password web-based
lookup service.  It'd be a cool distributed computing/database project.
Figured I register it under "death-to-des.org" or something...

I'm not entirely kidding about this...

-- 
Hal Pomeranz, Founder/CEO      Deer Run Associates      hal at deer-run.com
    Network Connectivity and Security, Systems Management, Training