There is nothing theoretically surprising about this, but hopefully its concreteness and the accompanying scenario will make an impression on people on people. The same technique should work to generate two documents with identical SHA1 hashes. http://www.cits.rub.de/MD5Collisions/ Regards, Zooko