[Cryptography] Oracle discovers the 1990s in crypto

[Viktor Dukhovni]

> On Jan 22, 2017, at 5:34 PM, Natanael <natanael.l at gmail.com> wrote:
> 
> http://www.mscs.dal.ca/~selinger/md5collision/
> 
> From 2006, and since then there's even been multicollision multifiletype hash collision generators with GPU acceleration and more. 
> 
> You can trivially generate valid files with colliding hashes.

Let's not confuse collision attacks with second pre-image attacks.

Tampering with existing signed objects requires a second pre-image
attack.  What is the estimated complexity of the best known second
pre-image attack on MD5?

-- 
	Viktor.