Preimage and Collision Attacks on MD2

  title={Preimage and Collision Attacks on MD2},
  author={Lars R. Knudsen and John Erik Mathiassen},
This paper contains several attacks on the hash function MD2 which has a hash code size of 128 bits. At Asiacrypt 2004 Muller presents the first known preimage attack on MD2. The time complexity of the attack is about 2 and the preimages consist always of 128 blocks. We present a preimage attack of complexity about 2 with the further advantage that the preimages are of variable lengths. Moreover we are always able to find many preimages for one given hash value. Also we introduce many new… CONTINUE READING
Highly Cited
This paper has 21 citations. REVIEW CITATIONS
15 Citations
5 References
Similar Papers


Publications referenced by this paper.
Showing 1-5 of 5 references


  • A. J. Menezes
  • C. van Oorschot, and S. A. Vanstone. Handbook of…
  • 1997
1 Excerpt

Similar Papers

Loading similar papers…