On 11 Feb 2001, Brian May wrote: > Also, I have heard there are algorithms that allow you to create a file > with the same md5sum, but different length[1]. I have seen this as well, there was a good example of forging PGP 2 fingerprints using this technique. > Hence, it is not good enough just testing the md5sum, you need to > check the file size too. Or include the size in the hash data.. Jason