jtchau.com

Interesting to read in this article that according to this research group, to construct this MD5 attack would take 32 years worth of CPU cycles of a typical single core desktop PC. But they completed it (the rogue CA cert) in 3 days using 200 PlayStation 3 game consoles in parallel. Basically the special hardware the PS3 used to provide super fast graphic makes each PS3 equal to 40 PC’s in complex number crunching.

This research group plans to publish in first half of 2009 the details of the latest improved algorithm they have used. However they estimate that other experienced research groups should be able to construct the same attack in a month by info in this article and public research results already published in 2007 by other research groups.

http://www.win.tue.nl/hashclash/rogue-ca/?ap1=rcb

Microsoft had sent out this response when this latest finding about MD5 was announced in a security conference in Berlin end of 2008.

http://www.microsoft.com/technet/security/advisory/961509.mspx