[erlang-questions] wow: MD5 broken

[Alceste Scalas]

Il giorno sab, 01/12/2007 alle 13.44 +0100, Per Hedeland ha scritto:
> "Joe Armstrong" <erlang@REDACTED> wrote:
> >
> >MD5 is really broken - gulp see
> >
> >http://www.win.tue.nl/hashclash/SoftIntCodeSign/
> 
> "Broken" is a too strong word - for any value produced by any hashing
> method, there will obviously be an infinite number of different inputs
> that produce the same value - the question is how hard it is to find
> them.

Well, in the case of MD5, the word "broken" is not that strong IMHO.
For example, you can create your own md5-colliding executables with this
useful (?) tool:

    http://www.mscs.dal.ca/~selinger/md5collision/

I've seen similar tools for creating md5-colliding PDFs, PSs, etc.

Regards,

alceste
-- 
Alceste Scalas <alceste@REDACTED>
CRS4 - http://www.crs4.it/