IETF RFC 3279 X.509 Certificate MD5 Signature Collision Vulnerability

Threat level definition

IETF RFC 3279 X.509 Certificate MD5 Signature Collision Vulnerability

References:

Creating a rogue CA certificate (Alexander Sotirov)
Information regarding MD5 collisions problem (Microsoft)
MD5 considered harmful today - Creating a rogue CA certificate (Alexander Sotirov, Marc Stevens, Jacob Appelbaum, Arjen Lenstra, David Molnar, D)
MD5 Weaknesses Could Lead to Certificate Forgery (Mozilla)
Microsoft Security Advisory (961509) (Microsoft)
Network Security Services (NSS) Product Page (Mozilla)
RFC 3279 - Algorithms and Identifiers for the Internet X.509 Public Key Infrastr (IETF)
RT Series Security FAQ (Yamaha)
TC TrustCenter Response to SSL Vulnerability Paper (TC TrustCenter)
This morning's MD5 attack - resolved (Verisign)
VU#836068 (US-CERT)
Weak MD5 Cryptographic Algorithm Allows for Certification Authority Certificate (Cisco)
Cisco Security Response: MD5 Hashes May Allow for Certificate Spoofing (Cisco)
TN 7690 - Are Entrust certificates susceptible to the md5 vulnerability? (Entrust)

Privacy Statement
Copyright 2008, SecurityFocus