.:[ packet storm ]:.
                         
all things security
all things security

 ///  File Name:md5-considered-harmful.pdf
Description:
MD5 Considered Harmful Today - Creating A Rogue CA Certificate. The authors of this paper have identified a vulnerability in the Internet Public Key Infrastructure (PKI) used to issue digital certificates for secure websites. As a proof of concept they executed a practical attack scenario and successfully created a rogue Certification Authority (CA) certificate trusted by all common web browsers. This certificate allows them to impersonate any website on the Internet, including banking and e-commerce sites secured using the HTTPS protocol.
Author:Arjen Lenstra, Benne de Weger, Dag Arne Osvik, David Molnar, Jacob Appelbaum, Marc Stevens,Alexander Sotirov
Homepage:http://www.win.tue.nl/hashclash/rogue-ca/
File Size:1800222
Last Modified:Dec 31 10:24:58 2008
MD5 Checksum:51b2bd6ef0ba7a507fadfac5fb1be20f

 .:. Back