Short Chosen-Prefix Collisions for MD5 and the Creation of a Rogue CA Certificate. - Marc Stevens 001; Alexander Sotirov; Jacob Appelbaum; Arjen K. Lenstra; David Molnar; Dag Arne Osvik; Benne de Weger (IACR Cryptol. ePrint Arch., 2009)