The RFCs for MD4 and MD5 provide some test vectors that you could use too. In my implementation, I found a bug when testing a couple of longer input strings. It might also make sense to use the `a_million_letter_a` test from SHA1's suite.

https://github.com/alco/rust-digest/blob/master/md5.rs#L289