News for hackers. Stuff that matters.

A comment on Announcing the first SHA-1 collision. Parent comment

Re:Announcing the first SHA-1 collision by fletom on Thursday February 23, 2017 @08:18PM (#13719924)
Why would you ever want to add a second broken hash like MD5 instead of just using a single secure function like SHA2, SHA3, or BLAKE2?
[ Parent | on HN ]
Re:Announcing the first SHA-1 collision by bch on Thursday February 23, 2017 @10:52PM (#13720808)
Only for the case like I mentioned (SourceForge example above) of verifying payloads that only ship with those two broken hashes. Not advocating for publishing new work like this.
[ Parent | on HN ]