Live data from Hacker News

Announcing the first SHA-1 collision

security.googleblog.com

1–10 of 524 posts

Re: Announcing the first SHA-1 collision

#7
Here's a good blog about how SHA-1 works:

http://www.metamorphosite.com/one-way-hash-encryption-sha1-d....

The biggest risk I see with this is how torrents are affected:

https://en.wikipedia.org/wiki/Torrent_poisoning

There's also a problem with git, but I don't see it being that as susceptible as torrents:

http://stackoverflow.com/a/34599081/6448137

Re: Announcing the first SHA-1 collision

#9
post #6

Anyone have back of the envelope calculations for the cost of the CPU and GPU time?

On the shattered webpage:

This attack required over 9,223,372,036,854,775,808 SHA1 computations. This took the equivalent processing power as 6,500 years of single-CPU computations and 110 years of single-GPU computations.

Post reply on HN