I believe the phrase you're searching for is "awesome applied crypto research." :-) http://www.win.tue.nl/hashclash/rogue-ca/ http://www.win.tue.nl/hashclash/ro

I believe the phrase you're searching for is "awesome applied crypto research." :-) http://www.win.tue.nl/hashclash/rogue-ca/ http://www.win.tue.nl/hashclash/rogue-ca/ We don't yet have details on the differences. I've looked at the evil colliding cert and, AFAICT, the "MD5 Considered Harmful" technique would probably have been sufficient to pull this off.