Hoping to avert “collision” with disaster, Microsoft retires SHA1

Re:Hoping to avert “collision” with disaster, Microsoft reti... by rakoo on Wednesday November 13, 2013 @02:46AM (#6723918)

  Microsoft officials went on to recommend that customers 
  stop using SHA1 now and begin using certificates based on 
  SHA2, which is much more resistant to collision attacks.

If SHA1 is broken at the algorithm level, one must _not_ use SHA2, which is the just a bigger SHA1.

[ Parent | on HN ]

Re:Hoping to avert “collision” with disaster, Microsoft reti... by beagle3 on Wednesday November 13, 2013 @08:04AM (#6724895)

"Just bigger" can buy 10-20 more years. The details do matter.

[ Parent | on HN ]