On Fri, Aug 1, 2014 at 7:12 PM, <gael.mc...@gmail.com> wrote: > Finding a collision is already very hard, finding working, malicious, code > with collision is nearly impossible.
If there's one thing I've learned from all the clever attack crafting papers I've seen (e.g. this one <https://www.cs.jhu.edu/~sam/ccs243-mason.pdf>), it's that if you can generate collisions you can probably generate malicious collisions just as easily, so I wouldn't count on that additional difficulty.
