Updated Security Considerations for the MD5 Message-Digest and the HMAC-MD5 Algorithms

Metadata

Publisher: IETF
Doc Type: Informational
Pages: 7
Abstract: This document updates the security considerations for the MD5 message digest algorithm. It also updates the security considerations for HMAC-MD5. This document is not an Internet Standards Track specification; it is published for informational purposes.
Publication Date: 2011-03-01
Status Note: Informational
DOI: 10.17487/RFC6151
Link: https://doi.org/10.17487/RFC6151
Author(s): Sean Turner
Lily Chen
Keyword(s): Signature, Encryption, IPSEC, Message Digest

Latest version of IETF RFC 6151

Document Versions — IETF RFC 6151

▶ IETF RFC 6151 (2011-03-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Bibliographic Reference(s)

NIST.SP.800-57 — NIST.SP800-57 EXTERNAL
NIST.SP.800-131 — SP800-131 EXTERNAL
Dobbertin, H., "Cryptanalysis of MD5 Compress", Eurocrypt 1996. EXTERNAL
S. Contini, Y.L. Yin. Forgery and partial key-recovery attacks on HMAC and NMAC using hash collisions. ASIACRYPT 2006. LNCS 4284, Springer, 2006. EXTERNAL
X. Wang, H. Yu, W. Wang, H. Zhang, and T. Zhan. Cryptanalysis of HMAC/NMAC-MD5 and MD5-MAC. LNCS 5479. Advances in Cryptology - EUROCRYPT2009, Springer, 2009. EXTERNAL
X. Wang, D. Feng, X. Lai, H. Yu, Collisions for Hash Functions MD4, MD5, HAVAL-128 and RIPEMD, 2004, http://eprint.iacr.org/2004/199.pdf EXTERNAL
Stevens, M., Lenstra, A., de Weger, B., Chosen-prefix Collisions for MD5 and Colliding X.509 Certificates for Different Identities. EuroCrypt 2007. EXTERNAL
Stevens, M., Lenstra, A., de Weger, B., "Chosen-prefix Collisions for MD5 and Applications", Journal of Cryptology, 2009. EXTERNAL
Stevens, M., "On Collisions for MD5", Master's Thesis, Eindhoven University of Technology, http://www.win.tue.nl/hashclash/ On%20Collisions%20for%20MD5%20-%20M.M.J.%20Stevens.pdf . EXTERNAL
Fouque, P.-A., Leurent, G., Nguyen, P.Q.: Full key- recovery attacks on HMAC/NMAC-MD4 and NMAC-MD5. CRYPTO 2007. LNCS 4622, Springer, 2007. EXTERNAL
V. Klima. Tunnels in Hash Functions: MD5 Collisions within a Minute. Cryptology ePrint Archive, Report 2006/105 (2006), http://eprint.iacr.org/2006/105 . EXTERNAL
den Boer, B. and A. Bosselaers, "Collisions for the compression function of MD5", Eurocrypt 1993. EXTERNAL
Stevens, M., Sotirov, A., Appelbaum, J., Lenstra, A., Molnar, D., Osvik, D., and B. de Weger. Short chosen- prefix collisions for MD5 and the creation of a rogue CA certificate, Crypto 2009. EXTERNAL
G. Leurent, Message freedom in MD4 and MD5 collisions: Application to APOP. Proceedings of FSE 2007. Lecture Notes in Computer Science 4715. Springer, 2007. EXTERNAL
X. Wang and H. Yu. How to Break MD5 and other Hash Functions. LNCS 3494. Advances in Cryptology - EUROCRYPT2005, Springer, 2005. EXTERNAL
Y. Sasaki and K. Aoki. Finding preimages in full MD5 faster than exhaustive search. Advances in Cryptology - EUROCRYPT 2009, LNCS 5479 of Lecture Notes in Computer Science, Springer, 2009. EXTERNAL
IETF RFC 1321 [Active*]
IETF RFC 1939 [Active*]
IETF RFC 2104 [Active, Amended*]
IETF RFC 2202 [Active*]
IETF RFC 4231 [Active*]
IETF RFC 4270 [Active*]
IETF RFC 4493 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC6151.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 6151, Updated Security Considerations for the MD5 Message-Digest and the HMAC-MD5 Algorithms. Available at https://doi.org/10.17487/RFC6151

Snippet:

IETF RFC 6151, Updated Security Considerations for the MD5 Message-Digest and the HMAC-MD5 Algorithms. Available at https://doi.org/10.17487/RFC6151

HTML (ISO 690 compliant)

Preview:

IETF RFC 6151, Updated Security Considerations for the MD5 Message-Digest and the HMAC-MD5 Algorithms. Available at https://doi.org/10.17487/RFC6151

Snippet:

<span class="citation"><cite>IETF RFC 6151</cite>, Updated Security Considerations for the MD5 Message-Digest and the HMAC-MD5 Algorithms. Available at <a href="https://doi.org/10.17487/RFC6151" target="_blank" rel="noopener">https://doi.org/10.17487/RFC6151</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 6151, Updated Security Considerations for the MD5 Message-Digest and the HMAC-MD5 Algorithms
doi: 10.17487/RFC6151
url: https://doi.org/10.17487/RFC6151

Snippet:

<li>
<cite id="bib-rfc6151">IETF RFC 6151</cite>, Updated Security Considerations for the MD5 Message-Digest and the HMAC-MD5 Algorithms
<span class="doi">10.17487/RFC6151</span>
</li>

Referenced By

IETF RFC 6176 [Active*]
IETF RFC 6920 [Active*]
IETF RFC 6929 [Active*]
IETF RFC 6931 [Superseded*]
IETF RFC 7217 [Active*]
IETF RFC 7292 [Active*]
IETF RFC 8152 [Superseded*]
IETF RFC 9155 [Active*]
IETF RFC 9231 [Active*]