<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Erratica &#187; md5</title>
	<atom:link href="http://www.liujoshua.org/tag/md5/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.liujoshua.org</link>
	<description>Joshua Liu Online</description>
	<lastBuildDate>Thu, 27 May 2010 21:35:39 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Practical MD5 collision exploits</title>
		<link>http://www.liujoshua.org/2009/01/07/practical-md5-collision-exploits/</link>
		<comments>http://www.liujoshua.org/2009/01/07/practical-md5-collision-exploits/#comments</comments>
		<pubDate>Thu, 08 Jan 2009 00:14:46 +0000</pubDate>
		<dc:creator>joshuwaliu</dc:creator>
				<category><![CDATA[Distributed Systems]]></category>
		<category><![CDATA[Information Security]]></category>
		<category><![CDATA[aws]]></category>
		<category><![CDATA[https]]></category>
		<category><![CDATA[md5]]></category>
		<category><![CDATA[ssl]]></category>

		<guid isPermaLink="false">http://joshuwaliu.com/wordpress/?p=82</guid>
		<description><![CDATA[The well known problem of MD5 collisions allowed researchers to impersonate a certificate authority. This would allow  HTTPS to be subverted via a man in the middle attack. For $2,000 and a day, hackers could pull off this attack using Amazon&#8217;s EC2.
Instead of relying on Google Reader&#8217;s sharing function, I think I&#8217;ll start posting tidbits [...]]]></description>
			<content:encoded><![CDATA[<p>The well known problem of MD5 collisions allowed <a href="http://www.win.tue.nl/hashclash/rogue-ca/">researchers</a> to impersonate a <a href="http://en.wikipedia.org/wiki/Certificate_Authority ">certificate authority</a>. This would allow  <a href="http://en.wikipedia.org/wiki/Https">HTTPS </a>to be subverted via a man in the middle attack. For <a href="http://www.insidetech.com/news/articles/3669-hackers-break-ssl-certificates-impersonate-ca?referral=IT_nlet_20090107">$2,000 and a day</a>, hackers could pull off this attack using Amazon&#8217;s <a href="http://aws.amazon.com/ec2/">EC2</a>.</p>
<p>Instead of relying on Google Reader&#8217;s sharing function, I think I&#8217;ll start posting tidbits on my blog.</p>
<p>I&#8217;m a huge fan of Amazon Web Services. I should play around a bit more with EC2.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.liujoshua.org/2009/01/07/practical-md5-collision-exploits/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

