How many sha1 hashes per second can current hardware (say a 500$ gpu) compute, when the input is 256 byte long? (or any other length).
The question behind is how long (or how costly) is it to mount a preimage attack against Cryptographic Generated Addresses (CGA, http://en.wikipedia.org/wiki/Cryptographically_Generated_Address). Suppose a CGA is mainly build by the 59 leftmost bits of a sha1 hash, how long does it take to find another hash where the 59leftmost bits match the CGA. The complexity is O(2^59)
Another thread led me to this page http://bench.cr.yp.to/results-hash.html where the performance of different systems in computing hashes is measured. However im not 100% sure if I can read out my desired answer as the performance is measured in cycles/bytes and I assume that the hashes where generated on cpus.