Jahaa: Du refererar till ett två år gammalt blogginlägg, säkerhetsinfo är dagsvaror
POC kod för att skapa md5-kollisioner släpptes för knappt ett år sen och användandet av algoritmen bör alltså ses som osäkert:
SiliconEntity writes "The crypto world was shaken to its roots last year with the announcement of a new algorithm to find collisions in the still widely-used MD5 hash algorithm. Despite considerable work and commentary since then, no source code for finding such collisions has been published. Until today! Patrick Stach has announced the availability of his source code for finding MD5 collisions and MD4 collisions (Coral cache links provided to prevent slashdotting). MD4 collisions can be found in a few seconds (but nobody uses that any more), while MD5 collisions (still being used!) take 45 minutes on a 1.6 GHz P4. At last we will be able to implement various attacks which have been purely hypothetical until now. This more than anything should be the final stake in the heart of MD5, now that anyone can generate collisions whenever they want."
http://it.slashdot.org/article.pl?sid=05/1...037232&from=rss