Paper 2007/101 Original: eprint.iacr.org/2007/101 ↗
Practical Password Recovery on an MD5 Challenge and Response
Abstract
This paper shows an attack against APOP protocol which is a challenge-and-response protocol. We utilize the Wang's attack to make collisions in MD5, and apply it to APOP protocol. We confirmed that the first 3 octets of secret key can be recovered by several hundred queries under the man-in-the-middle environment.
Metadata
- Available format(s)
PDF
- Category
- Cryptographic protocols
- Publication info
- Preprint.
- History
- 2007-03-22: last updated
- 2007-03-22: published
- Short URL
- https://ia.cr/2007/101
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2007/101,
author = {Yu Sasaki and Go Yamamoto and Kazumaro Aoki},
title = {Practical Password Recovery on an MD5 Challenge and Response},
howpublished = {Cryptology {ePrint} Archive, Paper 2007/101},
year = {2007},
url = {https://eprint.iacr.org/2007/101}
}