From 2009: a preimage attack reduced the complexity from 2^128 to 2^123.4 [1]. It's still a big number, but it's less than the theoretical complexity. [1] htt

From 2009: a preimage attack reduced the complexity from 2^128 to 2^123.4 [1]. It's still a big number, but it's less than the theoretical complexity. [1] https://www.iacr.org/archive/eurocrypt2009/54790136/54790136.pdf https://www.iacr.org/archive/eurocrypt2009/54790136/54790136...