[lug] Interesting sum "weakness"

[Jeffrey B. Siegal]

Sean Reifschneider wrote:
> I'd rephrase the bottom line as: There are known attacks against MD4 which
> allowed creation of a modified document with the same signature

Even then, only for some documents

> and
> it's believed that MD5 is vulnerable to the same attack.  However, there
> are no *KNOWN* attacks against MD5.

Nevertheless, it certainly seems prudent not to trust MD5.