thoughts.on.code

Bruce Schneier has posted another Hashing attack on his blog. This time duplicate certificates are created, using the MD5 hash algorithm. MD5 is now officially useless. With both of the major hash algorithms compromised, we really need a new hashing solution. My experience in the internals of hash algorithms is very weak, so I will not pretend to know what a good solution would be. Hopefully someone smarter than me will find a solution quickly.