] Eli Biham announced new results in cryptanalyzing SHA-1, ] including a collision in a reduced-round version of ] SHA-1. The full SHA-1 algorithm does 80 rounds of ] scrambling. At present, Biham and Chen can break ] versions of SHA-1 that use up to about 40 rounds, and ] they seem confident that their attacks can be extended to ] more rounds. This is a significant advance, but it's ] well short of the dramatic full break that was rumored. ] ] Where does this leave us? MD5 is fatally wounded; its ] use will be phased out. SHA-1 is still alive but the ] vultures are circling. A gradual transition away from ] SHA-1 will now start. The first stage will be a debate ] about alternatives, leading (I hope) to a consensus among ] practicing cryptographers about what the substitute will ] be. Answer, not a 5 alarm fire, but if you write or maintain cryptography code you can still expect some work coming up. Followup on SHA-1 break |