The SHAttered Attack on SHA-1

In 2017, CWI Amsterdam and Google announced the SHAttered attack on SHA-1, generating two different PDF files with the same hash in about 2^63.1 SHA-1 evaluations, equivalent to 6,500 years of single-CPU computation.

What was the SHAttered attack on SHA-1?

In 2017, CWI Amsterdam and Google announced the SHAttered attack by generating two different PDF files with the same hash. This required about 2^63.1 SHA-1 evaluations.

Next Random Fact

Explanation

The SHAttered attack represented a major milestone in cryptography when CWI Amsterdam and Google successfully demonstrated a collision against the widely used SHA-1 algorithm. A hash function is supposed to produce a unique digital fingerprint for every unique file, but this attack proved that two completely different PDF files could generate the exact same cryptographic hash value. Achieving this feat required an immense computational effort amounting to about 2 to the power of 63.1 SHA-1 evaluations.

To put this astronomical workload into perspective, the researchers noted that the required computations were equivalent to a staggering 6,500 years of continuous single-CPU computation. For an ordinary reader, this highlights the immense resources required to break cryptographic standards that once seemed secure. It demonstrates why digital security systems must continually evolve and migrate away from aging algorithms like SHA-1 toward much stronger protections, as advancing technology eventually makes even the most daunting computational barriers surmountable by determined researchers.

Source and verification

Source
Wikipedia: SHA-1 Tier B
Last verified
Confidence
90 out of 100
Verified by

How we verify facts

The headline, short answer and explanation on this page were drafted with AI assistance. A human editor checked them against the source before publishing.

Embed this fact

Report a problem with this fact

Used only if the editor needs to ask you about this report.