chosenprefix collisions for MD5 and the creation of a rogue CA certificate (2009)

by M Stevens, A Sotirov, J Appelbaum, A K Lenstra, D Molnar, D A Osvik, B de Weger, Short
Venue:http://eprint.iacr.org/2009/111, Crypto 2009, LNCS 5677