SHA-1 has been broken
It’s already all over the net, but Bruce Schneier says it best:
SHA-1 has been broken. Not a reduced-round version. Not a simplified version. The real thing. [full text]
Now I’m waiting for the usual suspects (Bruce included, of course) to weigh in. Is RIPE-MD160 vulnerable as well? Does the attack actually work? More to follow…


