Two Hundred PS3s Used To Hack SSL

A group of hackers, using 200 PlayStation 3 consoles, have found a way to exploit a known weakness in the MD5 algorithm to create a rogue Certification Authority which allows them to create their own SSL certificates. The research will be presented at the 25C3 conference in Germany.

Researchers at the Centrum Wiskunde & Informatica (CWI) in the Netherlands, EPFL in Switzerland, and Eindhoven University of Technology (TU/e) in the Netherlands helped in the design and implementation of the attack using an advanced implementation of a known MD5 collision construction and a cluster of more than 200 PlayStation 3 game consoles.

Comments