Expand description
MD5 from RFC 1321.
MD5 is retained for legacy compatibility. It is broken for collision
resistance and should not be used for new integrity designs. It also keeps
the Merkle-Damgaard length-extension property, so plain MD5(key || msg) is
not a secure MAC construction.