SHA-1 Broken

Nanolith writes "From Bruce Schneier's weblog: 'SHA-1 has been broken. Not a reduced-round version. Not a simplified version. The real thing. The research team of Xiaoyun Wang, Yiqun Lisa Yin, and Hongbo Yu (mostly from Shandong University in China) have been quietly circulating a paper announcing their results...'" Note, though, that Schneier also writes "The paper isn't generally available yet. At this point I can't tell if the attack is real, but the paper looks good and this is a reputable research team."

Comments

Hmm

[Jicksta]

So... anyone care to explain exactly what SHA-1 is?

Re:Hmm

[mboverload]

http://en.wikipedia.org/wiki/SHA_family

Re:Sigh

[hdparm]

And yet, you find a time to post here. What a royally-sized asshole you are.

Re:So what's the big deal for the rest of us?

[theantix]

Here's a practical example: the RIAA/MPAA could write an application that would generate a valid hash for random data, corrupting bittorrent downloads. Bittorrent uses SHA-1 -- if you don't believe me check the source yourself.

Same team who broke MD5

[henrypijames]

This is the same team who broken MD4, MD5, HAVAL-128 and RIPEMD six months ago, so I'd rather believe this is true that calling them liars.