MD5 verification executable files are no longer reliable

I thought with confidence that you have the ability to find the MD5 collision? Do you still have the ability to make the MD5 of two executable files the same, but can run normally, and can do completely different things?
A: Yes.
Http://www.win.tue.nl/hashclash/SoftIntCodeSign/HelloWorld-colliding.exe
Http://www.win.tue.nl/hashclash/SoftIntCodeSign/GoodbyeWorld-colliding.exe

The two programs print different characters on the screen, but their MD5 values are the same.

After reading the paper, the abstract is as follows:

These cryptographic Experts use chosen-Prefix collisions to launch this attack (an improved version of the attack method used by Wang Xiaoyun ).

The computer they use is a Sony PS3, and it only takes less than two days.

Their conclusion: the MD5 algorithm should no longer be used for any software integrity check or code signature purposes.

Another: Now, if you only want to generate files with the same MD5 but different content, you can do it in a few seconds on any mainstream computer.

The "quick MD5 collision generator" written by these cryptographic experts ":Http://www.win.tue.nl/hashclash/fastcoll_v1.0.0.5.exe.zip
Source code:Http://www.win.tue.nl/hashclash/fastcoll_v1.0.0.5_source.zip

(This text segment is transferred fromHttp://www.cnbeta.com/articles/59117.htm)

I downloaded fastcoll_v1.0.0.5.exe and tried it myself. If the object is a TXT file, we can see that the two generated files have not changed the text part, and the code is added. I found a very small vbprogram and found that the generated two files can still be executed. See:

The MD5 value cannot be used to download files in the future. It is no longer reliable.

Author:Zch _