From owner-freebsd-security@FreeBSD.ORG  Wed Aug 18 18:29:58 2004
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 44F8716A4CE
	for <freebsd-security@freebsd.org>;
	Wed, 18 Aug 2004 18:29:58 +0000 (GMT)
Received: from cowbert.2y.net (d46h180.public.uconn.edu [137.99.46.180])
	by mx1.FreeBSD.org (Postfix) with SMTP id EAA7C43D5A
	for <freebsd-security@freebsd.org>;
	Wed, 18 Aug 2004 18:29:57 +0000 (GMT)
	(envelope-from sirmoo@cowbert.net)
Received: (qmail 48839 invoked by uid 1001); 18 Aug 2004 18:29:57 -0000
Date: Wed, 18 Aug 2004 14:29:57 -0400
From: "Peter C. Lai" <sirmoo@cowbert.net>
To: Claudiu <dr.clau@rdslink.ro>
Message-ID: <20040818182957.GK346@cowbert.net>
References: <200408181724.i7IHORYl013375@bunrab.catwhisker.org>
	<20040818175804.GI346@cowbert.net> <41239B0C.1000703@rdslink.ro>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <41239B0C.1000703@rdslink.ro>
User-Agent: Mutt/1.5.6i
cc: freebsd-security@freebsd.org
Subject: Re: Report of collision-generation with MD5
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 18 Aug 2004 18:29:58 -0000

On Wed, Aug 18, 2004 at 09:08:12PM +0300, Claudiu wrote:
> hello,
> 
> please explain what do you mean by "reverse the hash". Is this the 
> recreation of the originial message from its hash ?

The short answer is yes. The slightly longer answer is that such is only one
specific case. The general case is that the digest should not reveal any 
information about the original message.