Home Resources Expert Opinions Information assurance quote: Sotirov et al, Creating a rogue CA certificate
quote: Sotirov et al, Creating a rogue CA certificate

Dropping support for a broken crypto primitive is hard in practice 
- but crypto can be broken overnight
what do we do if SHA-1 or RSA falls tomorrow?

Alexander Sotirov, Marc Stevens, Jacob Appelbaum, Arjen Lenstra, David Molnar, Dag Arne Osvik, Benne de Wegerr, "MD5 considered harmful today - Creating a rogue CA certificate", December 2008

 

Related Items