Cloudy with a Chance of Leaks | TechSNAP 308

chris

5 years ago

Not just Google on this, they worked with CWI
SHA1 is a Cryptographic hash function
SHA-1 was developed as part of the U.S. Government’s Capstone project. The original specification of the algorithm was published in 1993
two PDFs that have identical SHA-1 hashes but different content
Lifetimes of cryptographic hash functions – by Valerie Aurora
Git fscked by SHA-1 collision? Not so fast, says Linus Torvalds – Attack is hard, discovery is easy, so fix it right
rather than right now
Suggestion: Don’t panic. Things aren’t suddenly going to become vulnerable. Take your time, review your systems looking for SHA-1 usage and evaluate the risk, but best to get it of it all if you have not already.