OK, I am aware that creating hashes with MD5 is not considered secure in the presence of Bad Guys, but if you're using it in a safe environment just to see if files have changed since you last looked, is it perfectly good enough? Or should I still be using SHA2?

#HashAlgorithms #Techie #Cryptography #MD5 #SHA2 #SHA256

In case you didn't get the memo: it's time to stop using SHA1.

"The new collision gives attackers more options and flexibility than were available with the previous technique. [...] [G]enerally, it produces the same hash for two or more attacker-chosen inputs by appending data to each of them. The attack unveiled on Tuesday also costs as little as $45,000 to carry out."

#Security #Privacy #Authentication #SHA1 #HashAlgorithms

https://arstechnica.com/information-technology/2020/01/pgp-keys-software-security-and-much-more-threatened-by-new-sha1-exploit/

PGP keys, software security, and much more threatened by new SHA1 exploit

Behold: the world's first known chosen-prefix collision of widely used hash function.