Thursday, February 17, 2005 3:41 PM
xsherry
SHA-1 has been broken.
Or at least that's what they're saying. http://www.schneier.com/blog/archives/2005/02/sha1_broken.html
Thank goodness that the .Net framework has CryptoServiceProviders for SHA-256 and SHA-512 as well as SHA-1. Personally, I don't have any applications that I'm currently maintaining that have critically sensitive data, but I'll probaby start migrating my hashing utilities from SHA-1 to one of those providers anyway, just because I'm particular about these things.