More on Newly Broken SHA-1

AnonymousStudent writes "Details are out about the reported broken SHA-1 hash function. The findings are that SHA-1 is not collision free and can be broken in 2^69 attempts instead of 2^80. This is about 2000 times faster. With todays computing power and Moores Law, a SHA-1 hash does not last too long. Using a modified DES Cracker, for the small sum of up to $38M, SHA-1 can be broken in 56 hours, with current computing power. In 18 months, the cost should go down by half. Jon Callas, PGP's CTO, put it best: 'It's time to walk, but not run, to the fire exits. You don't see smoke, but the fire alarms have gone off.' As Schneier suggests, 'It's time for us all to migrate away from SHA-1.' Alternatives include SHA-256 and SHA-512."

Comments

SHA-1

[mboverload]

SHA-1? pshhhh. They should be using SHA+1. Thats 2 more!

Re:SHA-1

[stutterbug]

Soon, there will be SHA-++. And inevitably, Microsoft will make SHA-# ("sha-SHARP") that will take as much computing power to generate as it will to break. Ah, progress.

Re:2000 times faster?

[Temporal]

Jesus Christ. In the time it took to write my post (all of 30 seconds), five other people replied to you.

Just goes to show, the quickest and most effective way to get information on the net is to post something that is wrong.

Re:2000 times faster?

[Lisandro]

I bet $50 that a hard drive manufacturer came up with that!