Dr. ir. Marc Stevens is a
cryptology researcher most known for his work on cryptographic
hash collisions and for the creation of the chosen-prefix hash collision tool
HashClash as part of his
master's degree thesis. He first gained international attention for his work with
Alexander Sotirov
Alexander Sotirov is a computer security researcher. He has been employed by Determina and VMware. In 2012, Sotirov co-founded New York based Trail of Bits with Dino Dai Zovi and Dan Guido, where he currently serves as co-CEO.
He is well known for ...
,
Jacob Appelbaum,
Arjen Lenstra,
David Molnar,
Dag Arne Osvik, and
Benne de Weger
Sesame ( or ; ''Sesamum indicum'') is a flowering plant in the genus ''Sesamum'', also called benne. Numerous wild relatives occur in Africa and a smaller number in India. It is widely naturalized in tropical regions around the world and is cul ...
in creating a rogue
SSL certificate
In cryptography, a public key certificate, also known as a digital certificate or identity certificate, is an electronic document used to prove the validity of a public key. The certificate includes information about the key, information about the ...
which was presented in 2008 during the 25th annual
Chaos Communication Congress warning of the dangers of using the
MD5 hash function in issuing
SSL certificates
In cryptography, a public key certificate, also known as a digital certificate or identity certificate, is an electronic document used to prove the validity of a public key. The certificate includes information about the key, information about t ...
. Several years later in 2012, according to
Microsoft, the authors of the
Flame malware used similar methodology to that which the researchers warned of by initiating an MD5 collision to forge a Windows code-signing certificate. Marc was most recently awarded the
Google Security Privacy and Anti-abuse applied award. Google selected Stevens for this award in recognition of his work in Cryptanalysis, in particular related to the SHA-1 hash function.
In February 2017, the first known successful
SHA-1 collision attack in practice (termed "
SHAttered") was recognized. Marc Stevens was first-credited in the subsequent paper along with
CWI Amsterdam colleague Pierre Karpman, and researchers Elie Bursztein, Ange Albertini, Yarik Markov, Alex Petit Bianco, Clement Baisse from
Google.
Marc is currently employed as a Cryptology Researcher at
Centrum Wiskunde & Informatica.
References
External links
Marc Stevens' website
Living people
1981 births
People associated with computer security
{{Netherlands-bio-stub