4 ms·
I don't see whats the hurry in deprecating SHA-1, when for things like RC4/weak DH/SSLv3 there wasn't such a hurry, even though for those cases they were known
by edwintorok 11y ago
I don't see whats the hurry in deprecating SHA-1, when for things like RC4/weak DH/SSLv3 there wasn't such a hurry, even though for those cases they were known broken.
- brohee 11y agoSurely you missed https://eprint.iacr.org/2015/967.pdf https://eprint.iacr.org/2015/967.pdf , which prompted the CA/Browser Forum not to delay the SHA1 sunset.
- edwintorok 11y agoThanks, thats more worrying than the 2012 article linked on the cloudflare blog. The paper you linked to says 'will cost between 75K US$and 120K US$ and will plausibly take at most a few months', and not $700,000 like the CloudFlare blog does.
- sp332 11y agoThat's for a freestart collision, which is not the same as real-world attack. This is a big warning sign, but real attacks aren't that bad yet. https://www.schneier.com/blog/archives/2015/10/sha-1_freestart.html https://www.schneier.com/blog/archives/2015/10/sha-1_freesta...