• bloubz@lemmygrad.ml
      link
      fedilink
      English
      arrow-up
      3
      ·
      5 months ago

      It’s definitely the easiest. But that’s why we stopped using it, because it’s proven we can have collision so it may be possible to generate a match on a real life file. I’m not sure about where we’re at on this in research (if there’s any)

      Also I was actually not trying to make a point, just pointing on md5 as a joke

      • TrudeauCastroson [he/him]@hexbear.net
        link
        fedilink
        English
        arrow-up
        3
        ·
        5 months ago

        If you’re using any hash smaller than your file (not just md5), then it’s always possible to have 2 different files that match. This is just from pigeonhole principle. No matter what you use there will be collision.

        md5 is just bad because it’s small so it’s easier to generate this match. It’s also a question of how easy is it to reverse engineer a match, which apparently md5 is worse for on pictures than I expected.