Google Online Security Blog: Announcing the first SHA1 collision

This is not a newsletter about security, but I'm fascinated by just how much the internet has exploded with the first successful attack against SHA1. It's not news that SHA1 has had insecurities, but I'm fascinated by just how hard it was to exploit them. Here are the resources that were used in the effort:

  • Nine quintillion (9,223,372,036,854,775,808) SHA1 computations in total
  • 6,500 years of CPU computation to complete the attack first phase
  • 110 years of GPU computation to complete the second phase


Want to receive more content like this in your inbox?