RFC 6151: Updated Security Considerations for the MD5 Message-Digest and the HMAC-MD5 Algorithms

This document updates the security considerations for the MD5 message digest algorithm. It also updates the security considerations for HMAC-MD5. This…

Read RFC 6151 on the RFC Editor

Outgoing relationships (6 related RFCs)

Updates, Informative reference — RFC 2104: HMAC: Keyed-Hashing for Message Authentication
Updates, Informative reference — RFC 1321: The MD5 Message-Digest Algorithm
Informative reference — RFC 4270: Attacks on Cryptographic Hashes in Internet Protocols
Informative reference — RFC 4231: Identifiers and Test Vectors for HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, and HMAC-SHA-512
Informative reference — RFC 4493: The AES-CMAC Algorithm
Informative reference — RFC 2202: Test Cases for HMAC-MD5 and HMAC-SHA-1

Incoming relationships (32 related RFCs)

Normatively referenced by — RFC 7317: A YANG Data Model for System Management
Normatively referenced by — RFC 8489: Session Traversal Utilities for NAT (STUN)
Normatively referenced by — RFC 6421: Crypto-Agility Requirements for Remote Authentication Dial-In User Service (RADIUS)
Normatively referenced by — RFC 9415: On the Generation of Transient Numeric Identifiers
Informatively referenced by — RFC 6952: Analysis of BGP, LDP, PCEP, and MSDP Issues According to the Keying and Authentication for Routing Protocols (KARP) Design Guide
Informatively referenced by — RFC 7217: A Method for Generating Semantically Opaque Interface Identifiers with IPv6 Stateless Address Autoconfiguration (SLAAC)
Informatively referenced by — RFC 8152: CBOR Object Signing and Encryption (COSE)
Informatively referenced by — RFC 9053: CBOR Object Signing and Encryption (COSE): Initial Algorithms
Informatively referenced by — RFC 9182: A YANG Network Data Model for Layer 3 VPNs
Informatively referenced by — RFC 6528: Defending against Sequence Number Attacks
Informatively referenced by — RFC 6920: Naming Things with Hashes
Informatively referenced by — RFC 6929: Remote Authentication Dial In User Service (RADIUS) Protocol Extensions
Informatively referenced by — RFC 8945: Secret Key Transaction Authentication for DNS (TSIG)
Informatively referenced by — RFC 9562: Universally Unique IDentifiers (UUIDs)
Informatively referenced by — RFC 9834: YANG Data Models for Bearers and Attachment Circuits as a Service (ACaaS)
Informatively referenced by — RFC 6931: Additional XML Security Uniform Resource Identifiers (URIs)
Informatively referenced by — RFC 7693: The BLAKE2 Cryptographic Hash and Message Authentication Code (MAC)
Informatively referenced by — RFC 9155: Deprecating MD5 and SHA-1 Signature Hashes in TLS 1.2 and DTLS 1.2
Informatively referenced by — RFC 9530: Digest Fields
Informatively referenced by — RFC 7298: Babel Hashed Message Authentication Code (HMAC) Cryptographic Authentication
Informatively referenced by — RFC 6150: MD4 to Historic Status
Informatively referenced by — RFC 6331: Moving DIGEST-MD5 to Historic
Informatively referenced by — RFC 7943: A Method for Generating Semantically Opaque Interface Identifiers (IIDs) with the Dynamic Host Configuration Protocol for IPv6 (DHCPv6)
Informatively referenced by — RFC 8760: The Session Initiation Protocol (SIP) Digest Access Authentication Scheme
Informatively referenced by — RFC 9231: Additional XML Security Uniform Resource Identifiers (URIs)
Informatively referenced by — RFC 9648: YANG Data Model for TCP
Informatively referenced by — RFC 9887: Terminal Access Controller Access-Control System Plus (TACACS+) over TLS 1.3
Informatively referenced by — RFC 6668: SHA-2 Data Integrity Verification for the Secure Shell (SSH) Transport Layer Protocol
Informatively referenced by — RFC 8315: Cancel-Locks in Netnews Articles
Informatively referenced by — RFC 9399: Internet X.509 Public Key Infrastructure: Logotypes in X.509 Certificates
Informatively referenced by — RFC 9413: Maintaining Robust Protocols
Informatively referenced by — RFC 9765: RADIUS/1.1: Leveraging Application-Layer Protocol Negotiation (ALPN) to Remove MD5