Tuesday, October 13, 2015

For those about to die, we salute you!

Well, it's been a good run (20 years worth),

SHA-1 is about to die.  The costs of hacking this venerable hashing algorithm have dropped down (thanks to high-end graphics processors) to the point of it being very vulnerable.

Solution: Make sure your stuff is SHA-2 or SHA-3 compatible.

IOW:
  •     Hardware compatible with SHA-2/SHA-3
  •     Server software updates supporting SHA-2/SHA-3
  •     Client software support for SHA-2/SHA-3
  •     Custom application code support for SHA-2/SHA-3
Let's see if the smart administrators at OPM, Target, Sony, Anthem, etc are paying attention.  (Any bets?)

http://thehackernews.com/2015/10/sha-1-collision-attack.html