MD2 is a 128-bit cryptographic hash function and predecessor to MD4 and MD5. It is extremely slow and cryptographically broken with known collision and preimage attacks.
| Property | Value |
|---|---|
| Category | Hash Functions |
| Sub-category | MD Family |
| Security status | Not classified |
| Complexity | Not specified |
| Inventor | Ronald Rivest |
| Year | 1989 |
| Origin | 🇺🇸 United States |
| Source | algorithms/hash/md.js |
| Parameter | Supported values |
|---|---|
| Output sizes | 16 bytes (128 bits) |
Status: not classified — treat as unverified.
No vulnerabilities are recorded for this implementation.
3 vectors ship with this algorithm and run in the test suite. Byte values are hexadecimal.
Vector 1 — RFC 1319 Test Vector - Empty string
| Field | Value |
|---|---|
input |
(empty) |
expected |
8350e5a3e24c153df2275c9f80692773 |
Vector 2 — RFC 1319 Test Vector - ‘a’
| Field | Value |
|---|---|
input |
61 |
expected |
32ec01ec4a6dac72c0ab96fb34c0b5d1 |
Vector 3 — RFC 1319 Test Vector - ‘abc’
| Field | Value |
|---|---|
input |
616263 |
expected |
da853b0d3f88d99b30283a69e6ded6bb |