1. The Cryptographic Fall of MD5
Designed by Ronald Rivest in 1991, MD5 produces a 128-bit (32 hex character) hash. In 2004, Xiaoyun Wang demonstrated practical collision attacks. Today, generating two distinct files with identical MD5 digests takes less than a second on consumer hardware (chosen-prefix collisions).
⚠️ महत्वपूर्ण चेतावनी: MD5 must never be used for digital signatures, SSL certificates, password storage, or security verification.
2. Why MD5 Still Persists in the Real World
MD5 remains common in legacy software solely for non-adversarial error checking—such as verifying whether a ZIP download was accidentally truncated or deduplicating files in non-security database caches.
3. Detailed Comparison Table
• Output Length: MD5 is 128 bits (32 hex characters); SHA-256 is 256 bits (64 hex characters).
• Collision Resistance: MD5 is broken (2^20 complexity); SHA-256 is secure (2^128 complexity).
• Primary Purpose: MD5 is legacy checksums only; SHA-256 is modern security baseline.