Limits RegistryPUBLIC RECORD
Limits RegistryXiaoyun Wang, Dengguo Feng, Xuejia Lai and Hongbo Yu presented the first MD5 collisions at the CRYPTO 2004 rump session in August 2004, found in about an hour on an IBM P690. The technique, published at Eurocrypt 2005, led to MD5's deprecation and was later used in the Flame malware's forged Microsoft certificate.
The question, scope, and sources behind this Registry record.
Xiaoyun Wang, Dengguo Feng, Xuejia Lai and Hongbo Yu presented the first MD5 collisions at the CRYPTO 2004 rump session in August 2004, found in about an hour on an IBM P690. The technique, published at Eurocrypt 2005, led to MD5's deprecation and was later used in the Flame malware's forged Microsoft certificate.
The year in which two distinct messages with the same MD5 hash were first published.
Change a parameter to stress-test whether a proposed result is still inside the published specification. This is an audit aid, not a proof checker.
This record has no editable parameters. Read the formal question and assumptions before challenging it.
Current frontiers derived from accepted Claims.
An observed or demonstrated result; no opposing bound is implied.
The frontier is not sacred
Most progress starts with a disagreement that survives contact with evidence. If you can push the known lower bound up or pull the upper bound down, show us the work.
≥ when you have shown that at least this value is achievable.≤ when you have shown that anything above this value is impossible.No vibes. State the value, define the scope, and link the paper, proof, code, or reproduction that lets another person check it. Editors review every challenge before the public record changes.
Challenge this recordAssertions tied to evidence, attribution, and review.
The frontier as it changed over time.
Only accepted Claims matching the current specification contribute to the displayed bounds. Strict inequalities remain open; contradictory Claims require editorial review.
1 accepted Claim, with 1 linked evidence records.
Permanent ID limitsregistry.com/limits/LR-FIRST-MD5-COLLISION
No active verified bounties are linked to this Limit.
View verified bounty tracker ↗No accepted machine-checked reproductions are recorded for this Limit.
Limits Registry. LR-FIRST-MD5-COLLISION. First practical collision in the MD5 hash function. 2026.