MD2 Hash Generator
Generate 128-bit MD2 message digests of text or files.
MD2 · 128 bits
Result will appear here...
MD2 Hash Generator
Calculate the MD2 message digest of text, hex bytes, Base64 data, or a local file. The 128-bit result is shown as 32 hexadecimal characters and updates while you type. The calculation happens entirely in your browser.
About the MD2 algorithm
MD2 was published by Ron Rivest in 1989 and later documented in RFC 1319. It was built for 8-bit microprocessors of the era and appeared in early Privacy-Enhanced Mail (PEM) and in X.509 certificates signed with md2WithRSAEncryption. MD2 pads the message to a multiple of 16 bytes, appends a 16-byte checksum computed with a substitution table derived from the digits of π, and then mixes each block through 18 rounds of byte substitutions.
A few reference values help to confirm an implementation:
MD2("")=8350e5a3e24c153df2275c9f80692773MD2("abc")=da853b0d3f88d99b30283a69e6ded6bb
Why you might still need MD2
MD2 is obsolete, but it survives in legacy data: old certificate chains, archived PKCS#1 signatures, embedded devices, and textbook exercises in cryptography courses. When you migrate or audit such data you may need to recompute an MD2 value to compare it with a stored one. The Compare with a known hash field below the results makes that check a one-step job.
Features
- Text, hex, Base64, Latin-1, or file input
- Hex, uppercase HEX, or Base64 output
- One hash per line for bulk lists
For modern work, prefer SHA256 or SHA3-256. If you are exploring the MD family, compare the output with the MD4 Hash Generator and the MD5 Hash Generator.
Frequently Asked Questions
Is MD2 secure?
No. MD2 has known preimage and collision weaknesses and was formally moved to Historic status by RFC 6149 in 2011. Use it only to reproduce or check hashes from old systems, never for new security work.
How long is an MD2 hash?
MD2 always produces 128 bits, which is 16 bytes or 32 hexadecimal characters — the same length as MD4 and MD5, even though the algorithms are completely different.
Why is MD2 slower than MD5?
MD2 works one byte at a time with 18 passes over a 48-byte buffer for every 16-byte block, and it also computes a checksum block. It was designed for 8-bit machines, so on modern 32/64-bit processors it is much slower than MD5.