[LINK] MD5 hashing broken

[rchirgwin at ozemail.com.au]

Linkers,

http://www.cits.rub.de/MD5Collisions/

The point to the demonstration is this: it's possible to craft different 
documents which present the same MD5 hash with, the researchers claim, 
just a few hours' work on a PC. This means it's also possible to steal 
and misuse an MD5-based digital signature.

Of course replication of experiments is always nice. But taking the 
demonstration at face value, it's a pretty scary scenario...

RC