SHA-1 Broken

Whew, first MD-4, then MD-5 along with a few others, and now this. Both SSL and PGP make use of use SHA-1, and something you may be familiar with known as the .NET signed assembly.

SHA-1 has been broken. Not a reduced-round version. Not a simplified version. The real thing.

http://www.schneier.com/blog/archives/2005/02/sha1_broken.html

http://it.slashdot.org/article.pl?sid=05/02/19/1424201&from=rss