to attack MD5, the attacker can choose any set of messages and
work on these offline on a dedicated computing facility to find a
collision.

Question

Quizplus · Accepted Answer

MD5 is vulnerable to collision attacks, where an attacker can indeed choose a set of messages and use significant computing resources to find two different messages that produce the same MD5 hash. This vulnerability is due to weaknesses in the hash function's design.

To Attack MD5, the Attacker Can Choose Any Set of Messages