{"id":1685,"date":"2017-02-23T23:32:32","date_gmt":"2017-02-23T22:32:32","guid":{"rendered":"http:\/\/blog.benny-baumann.de\/?p=1685"},"modified":"2017-02-24T00:23:36","modified_gmt":"2017-02-23T23:23:36","slug":"obituary-for-sha-1","status":"publish","type":"post","link":"https:\/\/blog.benny-baumann.de\/?p=1685","title":{"rendered":"Obituary for SHA-1"},"content":{"rendered":"<p>Today we mourn the passing of a beloved old friend, SHA-1, who has been with us for many years. He was born as SHA to his parents NSA and NIST in 1993. A dire birth defect foreshadowed only short time to live. But thanks to a daring surgery switching the direction of one shift operation his health was drastically improved and SHA was reborn as SHA-1.<!--more--><\/p>\n<p>Today, together with his siblings he taught us such valuable lessons as:<\/p>\n<ul>\n<li>Error detection is easy if done right<\/li>\n<li>Small changes can have large effects<\/li>\n<li>Fast is not always good<\/li>\n<li>And to always hash passwords in storage.<\/li>\n<\/ul>\n<p>SHA-1 lived by simple, sound cryptographic policies (Shift, XOR, Combine, Repeat) and reliable strategies (And round, and round, and round).<\/p>\n<p>His health began to deteriorate rapidly when well-intentioned but overbearing cryptographers attacked.<br \/>\nReports of collision attacks in 2^^69 and later 2^^63 operations as well as further advances making up to 25% of the message irrelevant only worsened his condition in 2005.<\/p>\n<p>SHA-1 lost further ground when security researchers doing their job announced a free start collision in 2015. Estimates for SHA-1&#8217;s remaining live span were diminishing rapidly promising only months to a few years left.<\/p>\n<p>SHA-1 lost the will to live as people lost faith in its strength to protect their signatures.<\/p>\n<p>SHA-1 took a beating when browsers finally began to bully it in 2016 by ignoring its signatures.<\/p>\n<p>SHA-1 finally gave up the will to live, after researchers fabricated colour-schemed PDF documents just to make a point. They shattered the IT world, and promptly became even more famous.<\/p>\n<p>SHA-1 was preceded in death,<\/p>\n<ul>\n<li>by his nephews, MD4 and MD5,<\/li>\n<li>by his wife, RIPEMD,<\/li>\n<li>by his aunt, Snefru,<\/li>\n<li>by his uncle, HAVAL.<\/li>\n<\/ul>\n<p>He is survived by his 5 stepbrothers;<\/p>\n<ul>\n<li>SHA-2<\/li>\n<li>SHA-3<\/li>\n<li>Blake2<\/li>\n<li>ParallelHash<\/li>\n<li>KangarooTwelve<\/li>\n<\/ul>\n<p>Not many attended his funeral because so few realized he was already gone. If you still remember him, pass this on. If not, join the majority and do nothing.<\/p>\n<p>May people have mercy with its legacy and finally set SHA-1 to rest in peace.<\/p>\n<p class=\"wp-flattr-button\"><a href=\"https:\/\/blog.benny-baumann.de\/?flattrss_redirect&amp;id=1685&amp;md5=329acc31c4ab40cec435b9470f8d233a\" title=\"Flattr\" target=\"_blank\"><img src=\"http:\/\/blog.benny-baumann.de\/wp-content\/plugins\/flattr\/img\/flattr-badge-large.png\" srcset=\"http:\/\/blog.benny-baumann.de\/wp-content\/plugins\/flattr\/img\/flattr-badge-large.png\" alt=\"Flattr this!\"\/><\/a><\/p>","protected":false},"excerpt":{"rendered":"<p>Today we mourn the passing of a beloved old friend, SHA-1, who has been with us for many years. He was born as SHA to his parents NSA and NIST in 1993. A dire birth defect foreshadowed only short time to live. But thanks to a daring surgery switching the direction of one shift operation [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[1],"tags":[112,52],"class_list":["post-1685","post","type-post","status-publish","format-standard","hentry","category-allgemein","tag-kryptographie","tag-security"],"_links":{"self":[{"href":"https:\/\/blog.benny-baumann.de\/index.php?rest_route=\/wp\/v2\/posts\/1685","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.benny-baumann.de\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.benny-baumann.de\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.benny-baumann.de\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.benny-baumann.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1685"}],"version-history":[{"count":6,"href":"https:\/\/blog.benny-baumann.de\/index.php?rest_route=\/wp\/v2\/posts\/1685\/revisions"}],"predecessor-version":[{"id":1691,"href":"https:\/\/blog.benny-baumann.de\/index.php?rest_route=\/wp\/v2\/posts\/1685\/revisions\/1691"}],"wp:attachment":[{"href":"https:\/\/blog.benny-baumann.de\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1685"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.benny-baumann.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1685"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.benny-baumann.de\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1685"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}