> Some people still insist on using MD5 to reference file samples, for various reasons that don't make sense to me. If any of these people end up investigating code packed using Monomorph, they're going to get very confused.

Count me in the confused group. How can it be beneficial for different binaries to have the same hash, and how else can people easily verify archives?

Otherwise a nice binary packaging tool

That's the whole point, it's purpose is to confuse people using MD5. Use SHA256 (or any other non-broken hash function) and you won't have any issues.

Oh I see, then colour me embarrassed -- MD5 is 128-bit, something I never knew until now.