A SHA-1 chosen-prefix collision attack

Attacks on the SHA-1 hashing algorithm just got a lot more dangerous last week with the discovery of a cheap “chosen-prefix collision attack,” a more practical version of the SHA-1 collision attack first carried out by Google two years ago. Two years ago, academics from Google and CWI produced two files that had the same SHA-1 hash, in the world’s first ever SHA-1 collision attack — known as “SHAttered.” Image: Google
SHA-1 chosen-prefix attacks

But last week, a team of academics from France and Singapore has taken the SHAttered research one step further by demonstrating a SHA-1 “chosen-prefix” collision attack, in a new research paper titled “From Collisions to Chosen-Prefix Collisions – Application to Full SHA-1.”

Source: www.zdnet.com