News for hackers. Stuff that matters.

A comment on The first chosen-prefix collision for SHA-1. Parent comment

Re:The first chosen-prefix collision for SHA-1 by LeonM on Tuesday January 07, 2020 @09:21AM (#21980093)
A: (from the article)

SHA-1 has been broken for 15 years, so there is no good reason to use this hash function in modern security software. Attacks only get better over time, and the goal of the cryptanalysis effort is to warn users so that they can deprecate algorithms before the attacks get practical. We actually expect our attack to cost just a couple thousand USD in a few years.

[ Parent | on HN ]
Re:The first chosen-prefix collision for SHA-1 by pathseeker on Tuesday January 07, 2020 @01:28PM (#21982916)
That's not a relevant answer. Git's use-case is very specific and it's quite possible that this attack won't be relevant. It needs analysis.

>no good reason to use this hash function in modern security software

This argument conveniently ignores the cost to switching existing software (i.e. it's completely detached from reality).

[ Parent | on HN ]