Report of collision-generation with MD5

[Hal Pomeranz]

> > And yet, we still have vendors that ship crypt()'ed passwords today.
> 
> Who could possibly ever need a password longer than eight characters?

I've been pondering setting up a DES hash to cleartext password web-based
lookup service.  It'd be a cool distributed computing/database project.
Figured I register it under "death-to-des.org" or something...

I'm not entirely kidding about this...

-- 
Hal Pomeranz, Founder/CEO      Deer Run Associates      hal at deer-run.com
    Network Connectivity and Security, Systems Management, Training