The MD2 Message-Digest Algorithm is a cryptographic hash function. The algorithm is optimized for 8-bit computers. Although MD2 is no longer considered secure, even as of 2014, it remains in use in public key infrastructures as part of certificates generated with MD2 and RSA.
- First published - August 1989
- Series - MD2, MD4, MD5, MD6
- Digest sizes - 128 bits
- Structure - hash
- Rounds - 18
Ronald Rivest
Rogier and Chauvaud (1997) described collisions of MD2's compression function, although they were unable to extend the attack to the full MD2.
In 2009, security updates were issued disabling MD2 in OpenSSL, GnuTLS, and Network Security Services.
- md2.c