Abstract. MD5 is one of the most widely used cryptographic hash func- tions nowadays. It was designed in 1992 as an improvement of MD4, and its security was widely studied since then by several authors. The best known result so far was a semi free-start collision, in which the initia value of the ha