Yes, it was two valid signatures from two different stolen certs. The more terrifying crypto demo, IMO, was the Flame rootkit, which used a new MD5 collision t

Yes, it was two valid signatures from two different stolen certs. The more terrifying crypto demo, IMO, was the Flame rootkit, which used a new MD5 collision to forge its signature bona fides.