@RISK Online - The Security Blog
1 user(s) online.
[Previous entry: "SHA1 encryption has been "broken""] [Main Index] [Next entry: "Latest iptraffic files"]
02/18/2005: "SHA1 Update"
Looks like SHA1 may not be quite dead after all. Reading a recent report this morning, it now appears that the attack may be more theoretical than practical. Read here (emphasis mine):
"Although the cracking technique could not be carried out practically, it does compromise the integrity of the algorithm and could lead to more advanced attacks that would render SHA-1 useless, affecting many Internet security products that use it to generate digital signatures, according to Bruce Schneier, founder and chief technology officer of Counterpane Internet Security."
Okay, so SHA1 may be vulnerable to attack, but it does not appear that we're going to see a massive Internet Worm that compromises it anytime soon. This may be the first nail in the coffin of SHA1, but it's not dead yet.
|
