<div class="gmail_quote">2009/8/12 Roland Perry <span dir="ltr"><<a href="mailto:lists@internetpolicyagency.com">lists@internetpolicyagency.com</a>></span><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
In article <<a href="mailto:OF8269DB32.E0AA23D8-ON80257610.00311BFB-80257610.00312F95@nominet.org.uk" target="_blank">OF8269DB32.E0AA23D8-ON80257610.00311BFB-80257610.00312F95@nominet.org.uk</a><br>
>, <a href="mailto:Ray.Bellis@nominet.org.uk" target="_blank">Ray.Bellis@nominet.org.uk</a> writes<div class="im"><br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
I thought the whole point of the attack was to produce a new X.509 cert which has the same MD5 fingerprint as an existing cert<br>
</blockquote>
<br></div>
How easy is that? The sort of thing you do in a weekend, or is it '100 years with a CIA supercomputer' territory?<br><font color="#888888"></font></blockquote><div><br>"The most computationally
intensive part of our method required about 3 days of work with over 200 game consoles <i>(PS3s)</i>, which is
equivalent to 32 years of computing on a typical desktop computer", for MD-5 according to the researchers. <br> </div></div><br><br clear="all"><br>-- <br>Matthew Pemble<br>Technical Director, Idrach Ltd<br>
<br>Mobile: +44 (0) 7595 652175<br>Office: + 44 (0) 1324 820690<br>