Chosen-Prefix Collisions for MD5 and Colliding X.509 Certificates for Different Identities.

Marc Stevens, Arjen K. Lenstra, Benne de Weger

Browse the full EuroCrypt paper archive.