Search Results
Search type | Search syntax |
---|---|
Tags | [tag] |
Exact | "words here" |
Author |
user:1234 user:me (yours) |
Score |
score:3 (3+) score:0 (none) |
Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
Views | views:250 |
Code | code:"if (foo != bar)" |
Sections |
title:apples body:"apples oranges" |
URL | url:"*.example.com" |
Saves | in:saves |
Status |
closed:yes duplicate:no migrated:no wiki:no |
Types |
is:question is:answer |
Exclude |
-[tag] -apples |
For more details on advanced search visit our help page |
Secure Hash Algorithm is a family of cryptographic hash functions published by NIST. This includes SHA-1, and the SHA-2 and SHA-3 families of functions. SHA-1 is deprecated for all usages.
5
votes
1
answer
3k
views
How will SHA1 deprecation affect SHA1 roots in OS/Browser trust stores.
I understand the SHA1 deprecation policy applies to CA's issuing SHA2 end-entity certs and intermediates starting Jan 2017 but how will this policy affect the actual root certificates in OS/Browser tr …
25
votes
3
answers
13k
views
Is SHA1 weak for SSL?
I noticed that today after I scanned a site on the Qualys SSL Labs site that SSL ciphersuites which use SHA1 are now highlighted as being "Weak". It seems this has just happened; I scan sites pretty r …
1
vote
2
answers
423
views
What does 2^77.1 calls presented in a SHA1 attack mean?
Regarding the SHA 1 deprecation, I found this information here:
http://blogs.technet.com/b/srd/archive/2013/11/12/security-advisory-2880823-recommendation-to-discontinue-use-of-sha-1.aspx
I know that …
12
votes
3
answers
1k
views
How will SHA1 deprecation affect internal CA's?
I am hearing that the SHA1 Deprecation notices from MS/CHROME only apply to certs that are a part of a public trusted root program. This makes one believe that IE will have new logic built in to allow …
2
votes
1
answer
441
views
Why are CA's now signing root certs with SHA2?
I see that CA's are now giving the option of having the root CA cert signed with SHA2. I have been told that the hashing function in a root has no security value, and is irrelevant as far as a collisi …
15
votes
3
answers
2k
views
Trying to understand why signatures in root certs "are not used"?
Taken from here:
Don't worry if the root certificate uses SHA1; signatures on roots are
not used (and Chrome won't warn about them.
Why are the signatures not used?
Are not root certificates v …