4 ms·
Nice write-up, but it's slightly misleading or confusing to not explain that Nat McHugh's image collisions were chosen-prefix attacks. The post makes it sound l
by ademarre 11y ago
Nice write-up, but it's slightly misleading or confusing to not explain that Nat McHugh's image collisions were chosen-prefix attacks. The post makes it sound like the images were the product of some unexplained collision, and then goes on to explain how chosen prefix can be used to forge certificates.
- dsp1234 11y agoto not explain that Nat McHugh's image collisions were chosen-prefix attacks. In the paragraph right before those images, it says: "This was cleverly demonstrated by Nat McHugh, who used a chosen-prefix hash collision"
- ademarre 11y agoThanks for pointing that out. It was updated after initial publication. Originally it said: > This was cleverly demonstrated by Nat McHugh, who used the broken hash function MD5 to create two images with the same hash...