Alexander Sotirov personal blog
Creating a rogue CA certificate with MD5 hash collisions
We have identified a vulnerability in the Internet Public Key Infrastructure (PKI) used to issue digital certificates for secure websites. As a proof of concept we executed a practical attack scenario and successfully created a rogue Certification Authority (CA) certificate trusted by all common web browsers. This…
- Points
- 107
- HN comments
- 55
- Submissions
- 1
- Cited by
- 3 commenters
Security & PrivacyMath & Algorithms2008
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Dec 30, 2008 | Creating a rogue CA certificate with MD5 hash collisions by brl | 107 | 55 |
Cited in comments
Linked from 3 Hacker News comments by 3 different people, from Jun 2009 to May 2020.
Most recent:
