Tag Info

New answers tagged


According to Wikipedia (summary bar on the RHS), "No actual collisions have yet been produced" for SHA-1. The best we've done is find algorithms that "should" find collisions eventually. Since the point of a hash function is that any change (even a single bit) should change the whole result in a basically pseudorandom way, you're essentially looking at the ...


This is something I've spent some time trying to figure out too. The answer is a lot harder then it appears, but quite consistently seems to be "We have no clue". This might seem strange but it's actually quite reasonable when you consider what you are looking for. Essentially you're asking someone to find a collision in a hash function. That is supposed to ...


There are no practical attacks on SHA-1 yet. Experts estimate that SHA-1 attacks will start to appear around 2018. As you have correctly pointed out, companies like Google and Microsoft have already taken action and are replacing SHA-1 with newer and safer standards: Microsoft is recommending that customers and CA’s stop using SHA-1 for cryptographic ...


It's implied in the same article that Kaspersky has access to the code which uses the hashes. They know the algorithm because they have the code which generates it. What they want to know is what the code is targeting which is hidden by the hash.

Top 50 recent answers are included