Pope Flame I

Encyclical

"Collisio Quinta". The Flame malware disguised itself as Windows Update with a forged certificate, obtained through a new MD5 collision against Terminal Server Licensing certificates. It was the first state-level cryptanalysis seen at work in the field, and Microsoft had to revoke the certificates with advisory 2718704. The year taught that an algorithm declared broken must actually be retired, not just in words.

Saint page: Blessed Flame MD5 Collision

Cardinals

CRIME (TLS/SPDY compression side channel) · RDP remote code execution (MS12-020), wormable with a leaked PoC