New papers on MD5 collisions

The paper “Collision-Resistant usage of MD5 and SHA-1 via Message Preprocessing,” by Szydlo and Yin, presented at the NIST Hash Workshop, matters for practical reasons.

According to Niels Ferguson, the big problem is that MD5 is still used all over the place, and switching algorithms takes a long time. Steve Bellovin points out that it takes a year to get the change through the IETF and five to seven years for it to be adopted.
We already know that Microsoft, at least, has decided that MD5 must not be used in its internal development.