It's very likely they exist. But I don't think the existing attacks on MD5 will allow you to construct one. So you'd have to spend 2^64 on brute-force, which is

It's very likely they exist. But I don't think the existing attacks on MD5 will allow you to construct one. So you'd have to spend 2^64 on brute-force, which is expensive but feasible.