New research has heightened an already urgent call to abandon SHA-1, a cryptographic algorithm still used in many popular online services. In a paper called SHA-1 is a Shambles, researchers Gaëtan Leurent and Thomas Peyrin have demonstrated a new, powerful attack on the system that could enable attackers to fake digital certificates for as little as $45,000.

Read full article on Naked Security