Subject: [Cfrg] target collisions and colliding certificates with different identities

From: "Weger, B.M.M. de" <[email-masked]>
Date: Mon, 23 Oct 2006 23:58:21 +0200

Hi all,

We announce:
- an example of a target collision for MD5; this means: 
  for two chosen messages m1 and m2 we have constructed 
  appendages b1 and b2 to make the messages collide 
  under MD5, i.e. MD5(m1||b1) = MD5(m2||b2);
  said differently: we can cause an MD5 collision for 
  any pair of distinct IHVs;
- an example of a pair of valid, unsuspicious X.509 
  certificates with distinct Distinguished Name fields, 
  but identical CA signatures; this example makes use 
  of the target collision.

See http://www.win.tue.nl/hashclash/TargetCollidingCertificates/,
where the certificates and a more detailed announcement 
can be found.

Marc Stevens
Arjen Lenstra
Benne de Weger

_______________________________________________
Cfrg mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/cfrg