[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: MD5 weakness ? [was Re: Netscape Logic Bomb detailed by IETF]

To: [email protected] (Dr. Frederick B. Cohen)
Subject: Re: MD5 weakness ? [was Re: Netscape Logic Bomb detailed by IETF]
From: Mark <[email protected]>
Date: Wed, 25 Oct 1995 09:56:56 +1000 (E )
Cc: [email protected], [email protected]
In-Reply-To: <[email protected]> from "Dr. Frederick B. Cohen" at Oct 24, 95 10:42:10 am
Sender: [email protected]

>As to weaknesses, I seem to remember that someone managed to forge a
>modification to a program used to observe networks on a Sun so that it
>had the same MD5 checksum as the official trusted version.  But whether
>this is real is not strictly the issue. 

From memory that particular attack had more to do with altered operating
systems which reported back the correct information than anything to do with
a md5 hole. It is much easier to tell a program to say "abcdef" than it is
to come up with a series of bits that hash to the same md5 result as another
series of bits.

Keep trying Fred... you may get somewhere one day.

Mark
[email protected]

References:
- Re: MD5 weakness ? [was Re: Netscape Logic Bomb detailed by IETF]
  - From: [email protected] (Dr. Frederick B. Cohen)

Prev by Date: Re: What is needed for S/MIME remailer ?
Next by Date: Re: Does your software?
Prev by thread: Re: MD5 weakness ? [was Re: Netscape Logic Bomb detailed by IETF]
Next by thread: Re: MD5 weakness ? [was Re: Netscape Logic Bomb detailed by IETF]
Index(es):
- Date
- Thread