Smooth prime MD5 collisions

Ben Laurie ben at algroup.co.uk
Fri Oct 21 13:42:14 EDT 2005


Weger, B.M.M. de wrote:
> Hi Ben,
> 
> Looks like this is essentially the same as, or at least very similar to,
> 
> what Arjen Lenstra and I did in Section 4 of the full version of our
> paper
> "On the possibility of constructing meaningful hash collisions for
> public keys",
> see http://www.win.tue.nl/~bdeweger/CollidingCertificates/ddl-full.pdf.

:-)

I think I actually did something rather simpler, but I might be missing
something. Let me know when I write it up.

Cheers,

Ben.

-- 
http://www.apache-ssl.org/ben.html       http://www.thebunker.net/

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com



More information about the cryptography mailing list