4 ms·HMAC tolerates collisions in the underlying hash function. That said, stop using SHA1.by bascule 11y agoHMAC tolerates collisions in the underlying hash function. That said, stop using SHA1.