SoylentNews

An Anonymous Coward writes:

Bruce Schneier's blog has a report [schneier.com] on work by researchers from Centrum Wiskunde & Informatica, Inria, and Nanyang Technological University. Using a cluster of 16 computers, containing a total of 64 GPUs, they created two small files which have an identical SHA-1 hash. The SHA-1 [wikipedia.org] hashing algorithm, promulgated by the NSA and NIST, was already known to be cryptographically weak. This announcement does not signify a full compromise of the algorithm, such as has been achieved for MD5 [mathstat.dal.ca].

The cryptographers have made a site [google.com] setting forth their work.

Original Submission