[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [saag] X.509 certificate collision, via MD5 collisions




Some CAs issue very few certificates, so it is very easy to predict the next serial number that will be used by looking at the last certificate that was issued.

Russ


At 11:46 AM 3/3/2005, Sam Roberts wrote:

Wrote Ben Laurie <ben@xxxxxxxxxxxxx>, on Thu, Mar 03, 2005 at 02:54:35PM +0000:
> The issue is not the length of the serial number but its predictability.

I thought most CAs put some random component into the serial number, and
even for ones that just using a simple integer count, it would seem
quite difficult to predict the number of the next cert to be issued.

So, can anybody describe practical prediction strategies?

Cheers,
Sam

--
Sam Roberts <sroberts@xxxxxxxxxxxx>