SSCP · Question #1223
The main difference between MD5 and SHA is what?
The correct answer is B. SHA has 160 bit signature and MD5 has a 128 bit signature. The question asks for the fundamental technical difference between MD5 and SHA hash functions.
Question
The main difference between MD5 and SHA is what?
Options
- ASecurity - MD5 can be forged and SHA cannot
- BSHA has 160 bit signature and MD5 has a 128 bit signature
- CMD5 has 160 bit signature and SHA has a 128 bit signature
- DSecurity - SHA can be forged and MD5 cannot
How the community answered
(35 responses)- A3% (1)
- B91% (32)
- C6% (2)
Why each option
The question asks for the fundamental technical difference between MD5 and SHA hash functions.
Both MD5 and SHA-1 have known collision vulnerabilities, meaning they can be 'forged'; MD5 is significantly weaker and easier to forge than SHA-1.
The primary structural difference between MD5 and SHA-1 (the most common 'SHA' in this context) lies in their output hash sizes. SHA-1 generates a 160-bit hash value, providing greater collision resistance, whereas MD5 produces a shorter 128-bit hash value, making it more susceptible to collision attacks.
This choice incorrectly reverses the bit lengths for MD5 and SHA, as MD5 has a 128-bit signature and SHA-1 has a 160-bit signature.
This is incorrect; MD5 is much easier to forge due to known collision vulnerabilities, while SHA-1, though also vulnerable, is more robust than MD5.
Concept tested: Hash function properties (MD5 vs. SHA-1)
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-107r1.pdf
Topics
Community Discussion
No community discussion yet for this question.