The evaluation of MD5 hash tools as a digital forensics class experiment
Sean J. Geoghegan, Lisa Landers, Thomas Gray · Journal of computing sciences in colleges · 2009
Digital forensics tools frequently use the MD5 hash function to verify that a data set has not been altered due to the application of various evidence collection and analysis tools and procedures. Additionally, due to the impact on the personal life of the subject of an investigation, verification of the correct operation of tools and procedures is critical. This paper discusses an experiment that investigates the implementation of several MD5 hash tools. The results demonstrate that without sufficient attention to detail, unreliable tools can be created using reliable components. Additionally, unreliable results can be obtained through the improper application of the tools.